Waraxe IT Security Portal  
  Login or Register
::  Home  ::  Search  ::  Your Account  ::  Forums  ::   Waraxe Advisories  ::  Tools  ::
March 29, 2024
Menu
 Home
 Logout
 Discussions
 Forums
 Members List
 IRC chat
 Tools
 Base64 coder
 MD5 hash
 CRC32 checksum
 ROT13 coder
 SHA-1 hash
 URL-decoder
 Sql Char Encoder
 Affiliates
 y3dips ITsec
 Md5 Cracker
 User Manuals
 AlbumNow
 Content
 Content
 Sections
 FAQ
 Top
 Info
 Feedback
 Recommend Us
 Search
 Journal
 Your Account



User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9145

People Online:
Visitors: 822
Members: 0
Total: 822
PacketStorm News
·301 Moved Permanently

read more...
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> Cross-site scripting aka XSS -> XSS hacking
Post new topic  Reply to topic View previous topic :: View next topic 
XSS hacking
PostPosted: Wed Aug 11, 2004 9:14 pm Reply with quote
3ubz
Beginner
Beginner
 
Joined: Jul 29, 2004
Posts: 1




good day Smile Im very much curious on how critical XSS really is. Ive read from some sources that an attacker can break in to the server and take
control of it by just using XSS attack. I just cant understand how is it possible for them to do that. I've been searching the internet on this topic but too bad i just cant find the right explanation. Can you someone please explain it to me how do an attacker using XSS method can get into the web server and take over the server. How do they can execute commnads and put a backdoor files into the server using XSS codes. I know that file insertion can cause real harm to the server and can allow an attacker to
hack into the server by inserting a php shell into the server, but how about XSS codes? What kind of XSS codes do they use for this? Can u provide example of XSS Code they used? I have tried cookie stealing but i guess it wont let an attacker hacked the web server it self if im not mistaken. Correct me if im wrong. Sorry for being paranoid, i just dont want this thing happen to my server Smile Thank you very much!! Smile
View user's profile Send private message
PostPosted: Thu Aug 12, 2004 3:20 pm Reply with quote
schnibble
Regular user
Regular user
 
Joined: Jul 07, 2004
Posts: 13




What XSS can give you usually is cookie data for cookie insertion (posioning). With that you can simulate other person, which could have some kind of admin rights. With admin rights (on forum, cms, or any other system) you could upload, execute, dump database or browse folders, which in the end could lead to gaining full shell root rights. It's all dependant on system, and doesen't have strait forward instrucitons.

But any escelation of rights could theoretically lead to server take over.
View user's profile Send private message
XSS hacking
  www.waraxe.us Forum Index -> Cross-site scripting aka XSS
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Post new topic  Reply to topic  




Powered by phpBB © 2001-2008 phpBB Group






Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2020 Janek Vind "waraxe"
Page Generation: 0.142 Seconds