Donate to us via Paypal!
You cannot teach a man anything; you can only help him find it within himself. - Galileo
Wednesday, October 28, 2020
Navigation
Home
 Find:
 Information:
Learn
Communicate
Submit
Shop
Challenges
 Exploit:
 Programming:
 Think:
 Track:
 Patch:
 Other:
 Need Help?
Other
Members Online
Total Online: 105
Guests Online: 104
Members Online: 1

Registered Members: 129453
Newest Member: icaseda
Latest Articles

View Thread

HellBound Hackers | Computer General | Web hacking

Author

lil help with javascript


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 30-03-07 04:17
I was wondering wheni put this is the url

javascript:void(document.forms[0].to.value="[email protected]"Wink

it does not actually send the info to my email. When i alert the cookies with

javascript:alert(document.cookie)

it does not show that there has been any change. Is my script incorrect? are some websites just not succeptible to it? thx oin advance!


Author

RE: lil help with javascript


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 30-03-07 04:25
are you trying to change the forms but alert them as a cookie? those are two different things. you also need a ; after them both.


Author

RE: lil help with javascript


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 30-03-07 04:43
ok first, you change it like this:
Code
javascript:void(document.forms[0].INPUT.value="[email protected]");



where INPUT is the name of the input. ie., with
<input type="text" name="something">
the "name="something"" is what you put there.
second, it doesn't necessarily save it to your cookies, so alerting your cookie isn't going to tell you anything. you could do this though: javascript:alert(document.forms[0].INPUT.value), where INPUT is again the name of the input.

also, some sites aren't vulnerable to this. for example, I've tried it on a site but they filter the input for the email.

hope this helps.


Author

RE: lil help with javascript


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 30-03-07 04:47
it does help. thx a bunch to the both of ya!

edit: ummm... how do i know if the site is not succeptible? when i alert the form it does not do anything. anymore help would be appriciated!




Edited by on 30-03-07 04:54
Author

RE: lil help with javascript


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 30-03-07 08:22
you can very easy make a script that will not let
users create alerts.or let them create an alert,but just not
let them alert what they want,just an alert that tells the
users how noobish they are,trying t make alerts and stuff
and that is't of no use to try it ^^


Author

RE: lil help with javascript


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 30-03-07 08:55
when you alert the form it should tell you the new value of the input. if not, something's wrong with the javascript on your end.
if you alert it and do see the new value (your email) you can go ahead and submit the form.


Author

RE: lil help with javascript


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 30-03-07 14:11
EVERY site is succeptible to cookie modification, not sure about forms tho




Edited by on 30-03-07 14:12
Author

RE: lil help with javascript


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 30-03-07 22:42
well yes you can change ANY form values/cookies you want through javascript. javascript is a client-side script, meaning you can do whatever you want with it, keep in mind YOU are the one sending the site data so you have the power to change whatever you want. (it's the same concept with user agent changers too -- it's just your browser sending data to the server.)