| View previous topic :: View next topic |
| Author |
Message |
pkedpker
Master Cheater
![]() Reputation: 1
Joined: 11 Oct 2006
Posts: 412
|
 Posted: Tue Sep 09, 2008 7:40 pm Post subject: |
 |
|
I think you are looking for $_GET['var']; example it doesn't include javascript to use php to load up different pages..
try
| Code: |
<?php
echo $_GET['var'];
$var2 = $_GET['var];
echo $var2
include $var2.".html";
?>
|
page.php?var=Test
output will be
Test
Test
(it will try to load up page called Test.html in the same place as PHP is located this could cause a remote file inclusion vulnerability (hacking attmpt) as well.
Can you do a timer in php? yah you could php is just like C++ only not multi-threaded but doing a
<?php while(1) {} ?>
then closing your browser it will cause a php.exe to be loaded up forever on the hosts computer. (well.. they do have a limit to how load a php.exe could be loaded) but if you hosting a apache with php interpecter you could set in settings to run while loops forever you could code things as.. irc servers/clients in php, clientsideless game hacks in php with fsock
oh changing the javascript timer won't help you for rapidshare.. its serversided as well as clientsided.
Umm yah
javascript:commandhere;anothercommandhere;anothercommand;blah;blah void 0
i dont think its possible to do in php unless.. you load up rapidshare or whatever from fsocks by the php it self and while you are printing the page as a proxy.. you could modify the javascript before it gets loaded on your browser.. adding a [noscript] was a tricked used to disable all javascript but yah.. you have to load up the page in php then parse it
_________________
|
|
| Back to top |
|
 |
Fuzz
Grandmaster Cheater
![]() Reputation: 0
Joined: 12 Nov 2006
Posts: 531
|
| Posted: Tue Sep 09, 2008 7:47 pm Post subject: |
|
|
Jesus, I'm not doing rapidshare. It was a fucking example.
_________________
|
|
| Back to top |
|
|
jackyyll
Expert Cheater
![]() Reputation: 0
Joined: 28 Jan 2008
Posts: 143
Location: here
|
| Posted: Tue Sep 09, 2008 8:09 pm Post subject: |
|
|
| What's the URL you're trying to do it on, i'll give it a try.
|
|
| Back to top |
|
|
nog_lorp
Grandmaster Cheater
 Reputation: 0
Joined: 26 Feb 2006
Posts: 743
|
|
| Back to top |
|
|
Wintermoot
Expert Cheater
 Reputation: 0
Joined: 08 Nov 2007
Posts: 198
|
| Posted: Wed Sep 10, 2008 1:54 am Post subject: |
|
|
| FireBug. Get it and use it.
|
|
| Back to top |
|
|
nog_lorp
Grandmaster Cheater
Reputation: 0
Joined: 26 Feb 2006
Posts: 743
|
| Posted: Wed Sep 10, 2008 2:22 am Post subject: |
|
|
Does firebug have DOM Explorer-like features? If so I'm all over that like gravy on your mom.
_________________
Mutilated lips give a kiss on the wrist of the worm-like tips of tentacles expanding in my mind
I'm fine accepting only fresh brine you can get another drop of this yeah you wish |
|
| Back to top |
|
|
Wintermoot
Expert Cheater
Reputation: 0
Joined: 08 Nov 2007
Posts: 198
|
| Posted: Wed Sep 10, 2008 2:30 am Post subject: |
|
|
| JS console, live HTML editing (with a nice treeview expanding interface), CSS, JavaScript debugging (allows breakpoints xD), DOM, Network monitoring and allowance for addons meaning MUCH more... (I use the cookie editing addon)
|
|
| Back to top |
|
|
LolSalad
Grandmaster Cheater
![]() Reputation: 1
Joined: 26 Aug 2007
Posts: 988
Location: Australia
|
| Posted: Wed Sep 10, 2008 3:19 am Post subject: |
|
|
He wants to do XSS injection I presume.
_________________
|
|
| Back to top |
|
|
nog_lorp
Grandmaster Cheater
Reputation: 0
Joined: 26 Feb 2006
Posts: 743
|
| Posted: Wed Sep 10, 2008 12:34 pm Post subject: |
|
|
DOM tree view is so fucking useful it cannot even be expressed in words.
_________________
Mutilated lips give a kiss on the wrist of the worm-like tips of tentacles expanding in my mind
I'm fine accepting only fresh brine you can get another drop of this yeah you wish |
|
| Back to top |
|
|
Fuzz
Grandmaster Cheater
![]() Reputation: 0
Joined: 12 Nov 2006
Posts: 531
|
| Posted: Wed Sep 10, 2008 1:00 pm Post subject: |
|
|
Slavehack.com is the game.
When you download/upload there is a waiting time.
here's the javascript:
| Code: | var pressed19470848 = false;
91var finished19470848 = false;
92
93var date = new Date();
94var milisecStarted19470848=date.getTime()-0;
95var milisecEnd19470848=date.getTime()+613.20233917236*1000;
96var milisecTotalTime19470848=milisecEnd19470848-milisecStarted19470848;
97
98function prog19470848()
99{
100 if (pressed19470848 == false) {
101 pressed19470848 = true;
102
103 progBar19470848();
104 }
105}
106function progBar19470848()
107{
108 if (finished19470848 == false )
109 {
110 var now = new Date();
111 milisecNow19470848=now.getTime();
112
113 var miliSecondsLeft19470848=Math.ceil((milisecEnd19470848-milisecNow19470848)/100);
114 if(miliSecondsLeft19470848<0){miliSecondsLeft19470848=0;}
115
116 var hours19470848=Math.floor(miliSecondsLeft19470848/36000);
117 var minutes19470848=Math.floor(miliSecondsLeft19470848%36000/600);
118 var seconds19470848=Math.floor(miliSecondsLeft19470848%36000%600)/10;
119 if((seconds19470848%1)==0){seconds19470848=seconds19470848+".0";}
120 var output19470848;
121 if(hours19470848>0){
122 var output19470848=hours19470848+" hours, "+minutes19470848+" minutes and "+seconds19470848+" seconds.";
123 }else{
124 if(minutes19470848>0){
125 var output19470848=minutes19470848+" minute(s) and "+seconds19470848+" seconds.";
126 }else{
127 var output19470848=seconds19470848+" seconds.";
128 }
129 }
130
131
132
133 miliSecondsLeft19470848=Math.floor(miliSecondsLeft19470848)/10;
134 var procent19470848=Math.floor(((milisecTotalTime19470848-miliSecondsLeft19470848*1000)/milisecTotalTime19470848)*100);
135 if(procent19470848<=0){ procent19470848=1; }
136 if (milisecEnd19470848>=milisecNow19470848){
137
138 // miliSecondsLeft19470848=miliSecondsLeft19470848%3600%60;
139 //
140
141
142 //document.getElementById("d319470848").innerHTML= miliSecondsLeft19470848+" seconds left";
143 document.getElementById("d319470848").innerHTML= output19470848;
144 document.getElementById("d119470848").innerHTML=procent19470848+"%";
145
146 } else {
147 finished19470848 = true;
148 document.WorkForm19470848.submit();
149 document.getElementById("d119470848").innerHTML="100% ready";
150 document.getElementById("d319470848").innerHTML="<input class=form type=submit value=Continue></form>";
151 }
152 document.getElementById("d219470848").style.width=(procent19470848/100)*300+"px";
153 setTimeout("progBar19470848();", 100);
154 }
155}
156window.setTimeout("prog19470848()",242); |
_________________
|
|
| Back to top |
|
|
pkedpker
Master Cheater
![]() Reputation: 1
Joined: 11 Oct 2006
Posts: 412
|
| Posted: Wed Sep 10, 2008 5:39 pm Post subject: |
|
|
| Code: |
document.WorkForm19470848.submit(); <-- to bypass the timer
|
this should bypass the timer
| Code: |
javascript:finished19470848 = true; document.WorkForm19470848.submit(); void 0
|
just replace the URL in address bar with that code.
unless those numbers 19470848 are already randomly generated by webbrowser then you have to do it by hand.
_________________
|
|
| Back to top |
|
|
dnsi0
I post too much
![]() Reputation: 0
Joined: 04 Jan 2007
Posts: 2674
|
| Posted: Wed Sep 10, 2008 6:44 pm Post subject: |
|
|
| Books say that all you u have to do you prevent crosssite scritping is addslashes()... That kills every flaw I think.
|
|
| Back to top |
|
|
nog_lorp
Grandmaster Cheater
Reputation: 0
Joined: 26 Feb 2006
Posts: 743
|
| Posted: Wed Sep 10, 2008 10:13 pm Post subject: |
|
|
Nope. addslashes prevents SQL injection. While this is a major vector for XSS javascript injection, there are endless other ways. For example, addslashes won't defend against people posting comments in a forum that just blatantly contain HTML/javascript - you need a function that replaces symbols with their &; alternatives (< > etc).
_________________
Mutilated lips give a kiss on the wrist of the worm-like tips of tentacles expanding in my mind
I'm fine accepting only fresh brine you can get another drop of this yeah you wish |
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
.