Donate to us via Paypal!
Society leans ever heavily on computers, if you have the power to take out computers you can take out society. - cubeman372
Saturday, November 28, 2020
Navigation
Home
 Find:
 Information:
Learn
Communicate
Submit
Shop
Challenges
 Exploit:
 Programming:
 Think:
 Track:
 Patch:
 Other:
 Need Help?
Other
Members Online
Total Online: 93
Guests Online: 91
Members Online: 2

Registered Members: 130553
Newest Member: andre9998
Latest Articles

View Thread

HellBound Hackers | Computer General | Web hacking

Author

Javascript injection help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 21-08-06 21:24
Hi i need help on the javascript injection....I tried the cookie javascript:alert(docu<i></i>ment.cookie);...But i didn't see any pop up comming up saying the information of the cookies....Would anyone tell me what i'm doing wrong...Please and thank you.




Edited by on 21-08-06 21:25
Author

RE: Javascript injection help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 21-08-06 21:41
try:
javascript:alert(document.cookie)


Author

RE: Javascript injection help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 21-08-06 21:45
Okay, first of all, I hope you didn't include the italics tags. If you did, don't! - that tells me that you copied it straight out of a article or forum without doing any research on the subject. Look up javascript - use google, go to w3schools.com. There are a million ways to confirm information before using it. You can't just take one source and expect it to be correct everytime. If something that you read somewhere doesn't work - look elsewhere.

So, the task at hand for you is as follows:

1. Look up italics tags - hint: you will find them in html information. Once you figure out what they are and what they are used for - exclude them from your javascript command.

2. look up javascript commands - hint: go to www.w3schools.com - you will find a nice javascript tutorial link on their first page- go to it and read up.


Author

RE: Javascript injection help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 21-08-06 21:50
Hey thanks....But one more problem....I need to know how do i know i found information on th username and password of other accounts in other pages??All i see is numbers and letters in a pop up dialog box.Thanks again.


Author

RE: Javascript injection help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 21-08-06 21:53
Which challenge are you working on?


Author

RE: Javascript injection help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 21-08-06 23:01
No it's not a chellenge in hellboundhackers challenge section....It's just in general...Websites like localhookupz.com.....I'm trying to look at all the usernames and passwords that has been saved in the web.....I wanna e able to view them in the cookies.thanks again.


Author

RE: Javascript injection help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 21-08-06 23:36
rofl... What are you talking about amigo?!... Do you know what cookies do?!... ... ... Cuz it's definetly not that... Cookies store information about you, it's like handing out name tags after you login... It's information that's specific to you usually... Then on other pages throughout the website they're able to identify who you are based on the cookie information that was assigned to you at login... There's nothing in the cookie that's gonna help you get other user's information!!!... If you can somehow manage to get other peoplez cookie information tho (ie. xss attack) then you can sometimes use a javascript injection to "steal their identity" and login as them... Try google?... Maybe consider reseach?...


Author

RE: Javascript injection help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 22-08-06 05:35
Oh and i wanted to know.......WHy doesnt this injection work on the guestbooks when it try using it...<img src="javascript:alert('noob')">.I put that in a guestbook....i made sure that it was vulnerable with html....i put the <u> tags on to see if it worked....it did....then i put <img src="javascript:alert('noob')"> in the guestbook and i didnt see any pop up come up saying noob...What am i doing wrong?Thanks.




Edited by on 22-08-06 05:51
Author

RE: Javascript injection help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 27-08-06 04:44
Oh and i wanted to know.......WHy doesnt this injection work on the guestbooks when it try using it...<img src="javascript:alert('noob'Wink">.I put that in a guestbook....i made sure that it was vulnerable with html....i put the <u> tags on to see if it worked....it did....then i put <img src="javascript:alert('noob'Wink"> in the guestbook and i didnt see any pop up come up saying noob...What am i doing wrong?Thanks.


Author

RE: Javascript injection help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 27-08-06 05:09
rofl

you started it out with an image, that means that what comes after needs to be the url of an image, not a javascript. you can find out how to embed javascript into an image, that will work. also, just because something is html injectable doesnt mean it will accept javascript. try going to w3 and looking at the javascript tutorial. it will show u how to make a popup.


Author

RE: Javascript injection help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 30-08-06 22:52
I already know how to make a pop up.......
Code
javascript:alert("Hello world!")


.......I just want to know where is the best place to hack guestbooks.




Edited by on 30-08-06 22:52
Author

RE: Javascript injection help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 01-10-06 08:00
just.... dont hack guestbooks.... its lame...
"omg john! someone hacked our guestbook!"
john: "..."


Author

RE: Javascript injection help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 04-10-06 01:40
Oh well, i just wanted to know how/where is the best place to use javascript hacking.


Author

RE: Javascript injection help

richohealey
Member



Posts: 1022
Location: #!/usr/local/bin/python
Joined: 01.05.06
Rank:
Monster
Posted on 04-10-06 01:47
**cough** **cough**


**brings up a lung with the word "skiddy" on it**

yuo've almost got to give him credit fopr just coming out and saying "i want to deface peoples guestbooks!"

but seriously... you thought you could get people passwds from cookies?

**dies laughing**


bitchohealey at hotmail dot com skype:richohealey www.psych0tik.net
Author

RE: Javascript injection help

ranma
Member



Posts: 273
Location: Behind a sphere
Joined: 27.08.05
Rank:
Active User
Posted on 04-10-06 02:38
Oh come on. Give him a break. He's new for God's sake. ^^And fix your spelling before you flame/laugh at other people.
Othrwies u l00k lke an idito
Author

RE: Javascript injection help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 04-10-06 21:40
This Thread Rocks! (:

Here's the rockz0rd command.
Code
javascript:void(document.EnterTheSiteWithCookies);




By the way, remember to tell me if it works.




Edited by on 04-10-06 21:42