Follow us on Twitter!
Never in the field of human conflict was so much owed by so many to so few. - Winston Churchill
Saturday, July 23, 2016
Navigation
Home
 Find:
 Information:
Learn
Communicate
Submit
Shop
Challenges
 Exploit:
 Programming:
 Think:
 Track:
 Patch:
 Other:
 Need Help?
Other
Members Online
Total Online: 22
Guests Online: 21
Members Online: 1

Registered Members: 94676
Newest Member: chrisbiz
Latest Articles
View Thread

HellBound Hackers | Computer General | Web hacking

Author

help!


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 06-08-05 14:22
need help what is the password in this codse:

<SCRIPT LANGUAGE="JavaScript">
function pw()
{
var d1, Eingabe;
d1=window.document.linkColor;

Eingabe=prompt ("Please enter password");
if (Eingabe==d1)
{

window.location.href=String.fromCharCode(65,66,67)+".htm";
}
else
{
window.location.href="denied.htm";
}
}
</SCRIPT>
<p><a href="javascript:pw()" onFocus="this.blur()"><img src="enter.gif" border=0></a></p>
<IMG SRC="http://counter.digits.com/wc/-d/4/-h/zwei" ALIGN=middle
WIDTH=60 HEIGHT=20 BORDER=0 HSPACE=4 VSPACE=2>

Edited by on 13-08-05 18:17
Author

RE: help!

Mr_Cheese
Member



Posts: 2468
Location: Brighton, UK
Joined: 30.11.04
Rank:
Uber Elite
Posted on 06-08-05 18:34
from a quick look, try entering the "link colour" of that page.

So basically, whatever colour the links are, enter that colour into the password box.


Author

RE: help!


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 06-08-05 19:00
d1=window.document.linkColor;

Eingabe=prompt ("Please enter password";
if (Eingabe==d1)

That's all you need. The d1 equals the document's link color and the Eingabe, which is the password prompt, only accepts that variable. Although, there are other ways of completing this, this is probably the quickest way. Also, i seen this somewhere before...


Author

RE: help!


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 13-08-05 05:10
Something I've found useful when dealing with javascript security is to look for the variable that holds what your input should equal. Then, instead of reversing the whole thing (trust me, this CAN be a hassle), I just copy the script's source, then take out all the checking/prompting part and throw in a

document.write(pass_variable);

Run the page and it'll print the password out for you Wink


Author

RE: help!


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 13-08-05 07:57
Xero wrote:
Something I've found useful when dealing with javascript security is to look for the variable that holds what your input should equal. Then, instead of reversing the whole thing (trust me, this CAN be a hassle), I just copy the script's source, then take out all the checking/prompting part and throw in a

document.write(pass_variable);

Run the page and it'll print the password out for you Wink

Another thing that works is:

alert(pass_variable);