Waraxe IT Security Portal
Login or Register
July 18, 2024
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 209
Members: 0
Total: 209
Full disclosure
[KIS-2024-06] XenForo <= 2.2.15 (Template System) Remote Code Execution Vulnerability
[KIS-2024-05] XenForo <= 2.2.15 (Widget::actionSave) Cross-Site Request Forgery Vulnerability
CVE-2024-33326
CVE-2024-33327
CVE-2024-33328
CVE-2024-33329
CyberDanube Security Research 20240703-0 | Authenticated Command Injection in Helmholz Industrial Router REX100
SEC Consult SA-20240627-0 :: Local Privilege Escalation via MSI installer in SoftMaker Office / FreeOffice
SEC Consult SA-20240626-0 :: Multiple Vulnerabilities in Siemens Power Automation Products
Novel DoS Vulnerability Affecting WebRTC Media Servers
APPLE-SA-06-25-2024-1 AirPods Firmware Update 6A326, AirPods Firmware Update 6F8, and Beats Firmware Update 6F8
40 vulnerabilities in Toshiba Multi-Function Printers
17 vulnerabilities in Sharp Multi-Function Printers
SEC Consult SA-20240624-0 :: Multiple Vulnerabilities allowing complete bypass in Faronics WINSelect (Standard + Enterprise)
SEC Consult SA-20240620-0 :: Arbitrary File Upload in edu-sharing (metaVentis GmbH)
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> PhpBB -> phpBB 2.0.17 and most likely below Goto page Previous1, 2, 3, 4, 5
Post new topicReply to topic View previous topic :: View next topic
PostPosted: Thu Sep 15, 2005 6:36 am Reply with quote
robin1200
Regular user
Regular user
Joined: Sep 13, 2005
Posts: 19




the above code does not even includes the logout xss, as for the image ..."unicorn.jpg" where are we supposed to upload it to?

Rolling Eyes Rolling Eyes
View user's profile Send private message
PostPosted: Thu Sep 15, 2005 6:55 am Reply with quote
lunix
Regular user
Regular user
Joined: Aug 17, 2005
Posts: 16




I tried this a while ago. I also tried using the GD library to create an image with php.
But because the header sent by the script is a redirect header it wont work because the image will need to send image headers to get displayed.

So the script will be trying to tell the browser to look somewhere else because there is no file there, and then the image will be trying to download.

Its like trying to get a 404 error page that also contains your index.php

by having one it means you cant have the other.
Its a redirect OR an image, cant have both.

Would love to be proved wrong on this, but to the extent of my knowledge its inpossible.

_________________
View user's profile Send private message Visit poster's website
PostPosted: Thu Sep 15, 2005 8:09 am Reply with quote
Unicorn
Regular user
Regular user
Joined: Jul 17, 2005
Posts: 14




Ok, i spent a lot of time thinking and i thought, that maybe the best option is to trick people by making the picture a link....
Maybe anyone can work anything out of this.....

NB! Read my last post
View user's profile Send private message Visit poster's website
PostPosted: Sun Sep 25, 2005 10:06 pm Reply with quote
Ahasver
Beginner
Beginner
Joined: Sep 26, 2005
Posts: 2




Ok, hello guys Im new to yours forum and hope we will have a bunch of communication...(a little bit offtopic)

So, this topic really triggered me and i was wondering was it possible not to execute the logout command, but to do a real cross side script, to redirect the user to another script which will ofcourse have more mallicious code? (Or i just got this all wrong!?)

Greetings.
View user's profile Send private message
phpBB 2.0.17 and most likely below
www.waraxe.us Forum Index -> PhpBB
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT
Page 5 of 5
Goto page Previous1, 2, 3, 4, 5
Post new topicReply to topic


Powered by phpBB 2001-2008 phpBB Group



Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.120 Seconds