![]() |
|
LOL just hacked Microsoft.com via XSS by Coded32 - Printable Version +- Sinisterly (https://sinister.ly) +-- Forum: Hacking (https://sinister.ly/Forum-Hacking) +--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking) +--- Thread: LOL just hacked Microsoft.com via XSS by Coded32 (/Thread-LOL-just-hacked-Microsoft-com-via-XSS-by-Coded32) |
RE: LOL just hacked Microsoft.com via XSS by Coded32 - Mediocrity_mybb_import6293 - 02-14-2012 i was teaching myself Xss for about a day but got bored i dont really liek that type of hacking find it borign and un-useful RE: LOL just hacked Microsoft.com via XSS by Coded32 - Coded32 - 04-26-2012 Well, it would benefit if it was a persistent XSS on that, get a shell and rOOt the whole thing. RE: LOL just hacked Microsoft.com via XSS by Coded32 - zer0hnic - 04-27-2012 great job! Report it now! RE: LOL just hacked Microsoft.com via XSS by Coded32 - Shining White - 04-27-2012 (04-27-2012, 04:38 PM)zer0hnic Wrote: great job! its so older men , RE: LOL just hacked Microsoft.com via XSS by Coded32 - balmohan - 10-16-2013 I dont think its a hack try passing plain texts gets same alert box by eliminating xss tags <,>,(,),",' http://www.microsoft.com/ru-ru/events/platforma/materials/default.aspx?tag=jhnjkhnj I think <script> , alert(" ") are filtered and only string is passed so its showing final result as string in alert Then add string in brackets and hit enter both brackets eliminited and only string is shown now again pass <"Hii its not easy to hack me"> again < & > & " are removed so its not hack what ever you passed except string is filtered and only string is displayed Hope you cleared actually what was that |