Follow us on Twitter!
One mans freedom fighter, another's terrorist.
Wednesday, April 23, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 26
Guests Online: 20
Members Online: 6

Registered Members: 82885
Newest Member: ConiBE
Latest Articles
View Thread

HellBound Hackers | Computer General | Hacking in general

Author

Embedding XSS in an image

bl4ckc4t
Member

Your avatar

Posts: 591
Location: /etc/
Joined: 07.03.06
Rank:
Wiseman
Posted on 19-05-06 21:16
Ok, I have been wondering how people do this. Ive tried hex editting, using photoshop to hide a script behind a layer, and even looking at videos. not even google has helped me. Anyone know how to approach this or know how to do it? Its to test the security on a my friends website and I want to make a custom image that does this.

Bl4ckC4t


Author

RE: Embedding XSS in an image

bl4ckc4t
Member

Your avatar

Posts: 591
Location: /etc/
Joined: 07.03.06
Rank:
Wiseman
Posted on 19-05-06 21:25
Rebirth wrote:
Note pad, that is all there is to it.


Notepad doesnt create images.



Author

RE: Embedding XSS in an image


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 19-05-06 21:45
http://ha.ckers.o. . .


Author

RE: Embedding XSS in an image


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 19-05-06 21:47
hex editor would work, I think note pad might work but note pd doesnt display all characters.


Author

RE: Embedding XSS in an image


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 19-05-06 23:18
i dont think that you are literally supposed to put the javascript into the pictrure coding itself. all you have to do is <img src="javascript:alert('xss'Wink"> i am pretty sure.


Author

RE: Embedding XSS in an image


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 20-05-06 03:32
chislam wrote:
i dont think that you are literally supposed to put the javascript into the pictrure coding itself. all you have to do is <img src="javascript:alert('xss'Wink"> i am pretty sure.


its used to trick people into clicking on an image link, then it sends their cookies to another site..


Author

RE: Embedding XSS in an image


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 20-05-06 03:37
gdam double post




Edited by on 20-05-06 03:38
Author

RE: Embedding XSS in an image


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 20-05-06 04:01
are you willing to share your code?


Author

RE: Embedding XSS in an image


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 20-05-06 04:49
been reasearching for a long while now..

http://milw0rm.co. . ..php?id=26 doesnt work, either does http://ha.ckers.o. . ... and its like the first time google hasnt helped me