Donate to us via Paypal!
Society leans ever heavily on computers, if you have the power to take out computers you can take out society. - cubeman372
Friday, October 30, 2020
Navigation
Home
 Find:
 Information:
Learn
Communicate
Submit
Shop
Challenges
 Exploit:
 Programming:
 Think:
 Track:
 Patch:
 Other:
 Need Help?
Other
Members Online
Total Online: 144
Guests Online: 139
Members Online: 5

Registered Members: 129508
Newest Member: dvx
Latest Articles

View Thread

HellBound Hackers | Computer General | Web hacking

Author

JS injection


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 08-04-07 19:50
hello, can someone help me with js injection? i have this button:
Code
<input class="regularBtn" type="submit" value="Confirm" onclick="return verify_points();" />



and this code
Code

<script type="text/javascript">
    function verify_points() {
      var points = 5;
              if ($('exchange_3days').checked) {
          if (points < 1500) {
            alert("Not enough points!");
            return false;
          }
        }
              if ($('exchange_7days').checked) {
          if (points < 2500) {
            alert("Not enough points!");
            return false;
          }
        }
              if ($('exchange_1month').checked) {
          if (points < 3500) {
            alert("Not enough points!");
            return false;
          }
        }
              if ($('exchange_4month').checked) {
          if (points < 10000) {
            alert("Not enough points!");
            return false;
          }
        }
              if ($('exchange_6month').checked) {
          if (points < 15000) {
            alert("Not enough points!");
            return false;
          }
        }
              if ($('exchange_1year').checked) {
          if (points < 25000) {
            alert("Not enough points!");
            return false;
          }
        }
              if ($('exchange_2years').checked) {
          if (points < 50000) {
            alert("Not enough points!");
            return false;
          }
        }
              if ($('exchangealways').checked) {
          if (points < 50000) {
            alert("Not enough points!");
            return false;
          }
        }
            return true;
    }
  </script>





how can i inject it? thx

***EDIT***
thx Nick smileys are disbled




Edited by on 08-04-07 20:01
Author

RE: JS injection


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 08-04-07 19:53
If you disabled smiley it would probably help some. Wink


Author

RE: JS injection


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 08-04-07 20:50
well you could change the value of the variable (points) if that's what you mean. just put this in the url bar:
Code
javascript:void(points=10000000);alert(points);



and it should alert the new value of the points. I think that's what you meant by JS injection?


Author

RE: JS injection


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 08-04-07 21:05
yes thats it thx


Author

RE: JS injection


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 08-04-07 21:15
what exactly are you faking points on??
Author

RE: JS injection


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 09-04-07 02:24
although it doesn't hurt to know the commands there's a nice firefox extension called bugzilla that makes this sort of thing fun and painless