Follow us on Twitter!
Ideas are far more powerful than guns.
Monday, April 21, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 27
Guests Online: 27
Members Online: 0

Registered Members: 82852
Newest Member: sockpuppets
Latest Articles
View Thread

HellBound Hackers | Challenges | Javascript

Author

Js injection help

ghostraider100
Member



Posts: 71
Location:
Joined: 01.08.10
Rank:
Wiseman
Posted on 28-03-11 17:42
Hey guys i couldn't undestand how an js injection works. Some1 demo me with a example/syntax how it should be used, in a URL.
Author

RE: Js injection help

Mtutnid
Member

Your avatar

Posts: 102
Location: HELL
Joined: 22.09.10
Rank:
Newbie
Posted on 28-03-11 17:46
Have you tried google?


Carve me up, slice me apart
Suck my guts and lick my heart
Chop me up, I like to be hurt
Drink my marrow and blood for dessert

My one desire, my only wish is to be-
EATEN...
Author

RE: Js injection help

ghostraider100
Member



Posts: 71
Location:
Joined: 01.08.10
Rank:
Wiseman
Posted on 28-03-11 17:54
S, i've tried but i cant get it lol. If u hav a good tutors url post here.
Author

RE: Js injection help

Mtutnid
Member

Your avatar

Posts: 102
Location: HELL
Joined: 22.09.10
Rank:
Newbie
Posted on 28-03-11 18:21
learn javascript and then start with injections. You can execute things like MoshBat showed above


Carve me up, slice me apart
Suck my guts and lick my heart
Chop me up, I like to be hurt
Drink my marrow and blood for dessert

My one desire, my only wish is to be-
EATEN...
Author

RE: Js injection help

ghostraider100
Member



Posts: 71
Location:
Joined: 01.08.10
Rank:
Wiseman
Posted on 28-03-11 18:39
i've tried tat code lol it doest hav any effect hbh challanges(js9 esp.).
Author

RE: Js injection help

ghostraider100
Member



Posts: 71
Location:
Joined: 01.08.10
Rank:
Wiseman
Posted on 28-03-11 18:44
@mtutnid
i know js lol
Author

RE: Js injection help

ghostraider100
Member



Posts: 71
Location:
Joined: 01.08.10
Rank:
Wiseman
Posted on 28-03-11 18:54
@moshbat
i know some basic commands such as alert, document.write, then string manip, functions, etc.,
Author

RE: Js injection help

techb
Member



Posts: 384
Location:
Joined: 15.02.09
Rank:
Moderate
Posted on 28-03-11 20:05
speaking of js injections, I found this on hackaday; it will turn any page into a Katamari game.

CODE::
Code

javascript:var i,s,ss=['http://kathack.com/js/kh.js','http://ajax.googleapis.com/ajax/libs/jquery/1.5.1/jquery.min.js'];for(i=0;i!=ss.length;i++){s=document.createElement('script');s.src=ss[i];document.body.appendChild(s);}void(0);






if that didn't work. It can be found here.
I have even tried it here on HBH and if you get enough to stick to the ball, it will pick up the banner too.


www.userbars.com/74460/665255/337-7865-ubda3219.gif
kbcarte.wordpress.com
Author

RE: Js injection help

t0xikc0mputer
Member



Posts: 112
Location: t0xik waste dump
Joined: 07.01.11
Rank:
Newbie
Posted on 28-03-11 23:18
techb wrote:
speaking of js injections, I found this on hackaday; it will turn any page into a Katamari game.

CODE::
Code

javascript:var i,s,ss=['http://kathack.com/js/kh.js','http://ajax.googleapis.com/ajax/libs/jquery/1.5.1/jquery.min.js'];for(i=0;i!=ss.length;i++){s=document.createElement('script');s.src=ss[i];document.body.appendChild(s);}void(0);






if that didn't work. It can be found here.
I have even tried it here on HBH and if you get enough to stick to the ball, it will pick up the banner too.


That's so cool!


Author

RE: Js injection help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 30-03-11 11:37
techb wrote:
speaking of js injections, I found this on hackaday; it will turn any page into a Katamari game.

CODE::
Code

javascript:var i,s,ss=['http://kathack.com/js/kh.js','http://ajax.googleapis.com/ajax/libs/jquery/1.5.1/jquery.min.js'];for(i=0;i!=ss.length;i++){s=document.createElement('script');s.src=ss[i];document.body.appendChild(s);}void(0);






if that didn't work. It can be found here.
I have even tried it here on HBH and if you get enough to stick to the ball, it will pick up the banner too.


quick newbie question... Let's say this code is injected in some website vulnerable to SS... will the page itself be a katamari game permanently (obvious;y till it gets patched)? :evil:
Author

RE: Js injection help


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 30-03-11 12:49
You can think of an xss made in a forum post, a guest book post etc. Then yes. Otherwise you must indeed send a horribly misformed URL, or at least send something to a specific person.