Cenzic 232 Patent
Paid Advertising
sla.ckers.org is
ha.ckers sla.cking
Sla.ckers.org
For any nonsense or banter that doesn't fit anywhere else. LoL! omg! ROFL! 
Go to Topic: PreviousNext
Go to: Forum ListMessage ListNew TopicSearchLog In
Myspace hack/bug
Posted by: adam
Date: December 18, 2006 01:34PM

My profile on myspace appeared to be the victim of something crazy recently were code was added to my profile which I didn't add myself :O!

The coded added a menu bar with dead links as far as I can tell.

I don't know if it is a bug in myspace or some kind of hack. I think it appeared on my page after I clicked on the same links on another profile.

I'm going to take it off shortly but if you want a peak at what I'm talking about myspace.com/oadamo

It's quite random.

Options: ReplyQuote
Re: Myspace hack/bug
Posted by: rsnake
Date: December 18, 2006 01:40PM

Looks like you got hit by one of those myspace worms. :) Best clean that one out.

- RSnake
Gotta love it. http://ha.ckers.org

Options: ReplyQuote
Re: Myspace hack/bug
Posted by: adam
Date: December 18, 2006 01:44PM

I wanna know how it worked! :o

I can't see any javascript but then it does crash my browser a lot ;x

Options: ReplyQuote
Re: Myspace hack/bug
Posted by: maluc
Date: December 18, 2006 02:58PM

i believe that was the effect of the most recent myspace worm which used the quicktime XSS. i think it changed the top menu and added some spam for porn to download adware.

as for the exploit.. it should be in your profile now, or at the least, its in your friend's profile that infected you. view the source and look for an <embed> tag with a quicktime video (probably .mov but doesn't have to be).

but it's nothing special.. you can view a similar one at http://myspace.com/cookietheft (don't do it while logged in, i wouldn't trust myself with my cookies if i weren't me.. >.>)

-maluc

Options: ReplyQuote
Re: Myspace hack/bug
Posted by: jungsonn
Date: December 18, 2006 03:34PM

Scary place. Brrrr! *o*

Options: ReplyQuote
Re: Myspace hack/bug
Posted by: kuza55
Date: December 18, 2006 04:39PM

I had a look and it seems its not a worm, but simply a piece of code which pops up an alert which says HI, it uses v-wall's exploit (<body onload.._="alert('HI')">) to pop up an alert box, maybe it was simply a page that infected all who viewed it, but not a worm......

Options: ReplyQuote
Re: Myspace hack/bug
Posted by: maluc
Date: December 18, 2006 04:47PM

well, he said he was removing it shortly..and that "The coded added a menu bar with dead links as far as I can tell. "

so i assume he added that HI popup himself - and removed the worm code.

-maluc

Options: ReplyQuote
Re: Myspace hack/bug
Posted by: adam
Date: December 18, 2006 05:59PM

Nah I added the javascript alert ;)

Just not the crazy menu.

Options: ReplyQuote


Sorry, only registered users may post in this forum.