full-disclosure - Re: on xss and its technical merit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <a8fe69350712131653q60e369e1i810e2bf6448dc8db@mail.gmail.com>
Date: Thu, 13 Dec 2007 18:53:03 -0600
From: "Fredrick Diggle" <fdiggle@...il.com>
To: "Morning Wood" <se_cur_ity@...mail.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: on xss and its technical merit

http://www.awarenetwork.org/home/outlaw/ezines/h0no/h0no2.txt

"Sirs, you are very missinformed as to MY involvment in this "video". I
share a site with "illwill", it was his decision solely to post and the
paypal link is under his name."

Way to stand up for you friends there MW.

YAY!

On Dec 13, 2007 5:59 PM, Morning Wood <se_cur_ity@...mail.com> wrote:

> > WRONG! Once again xss is not the exploit it is just the delivery
> > mechanism.
>
> obviously it is the delivery vector, by using the persistant or
> non-persistand xss flaw in ones site / web app
> .. dont think i said otherwise
>
> > You aren't doing anything here that you couldn't also do by posting the
> > exploit on your damn live journal right next to the paris hilton video.
>
> WRONG! I dont have a LiveJournal page, but i am sure you prolly do and
> read
> others bs dribble on fase-book or whatever other bs social gayness site
> you
> follow
>
> >
> > Did you end up paying damages?
>
> huh?
>
> >
> > YAY!
>
> w00t!
>
> >
> > On Dec 13, 2007 11:46 AM, Morning Wood <se_cur_ity@...mail.com> wrote:
> >
> >> 4. use xss to IFRAME or otherwise leverage a client exploit
> >>
> >> imho this is by far worse than any of the other vectors mentioned
> >>
> >
>
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/