Paid Advertising
at the start of every form.
GM_registerMenuCommand("Start XSSing forms", start);
GM_registerMenuCommand("Stop XSSing forms", stop); which will let the user start and stop XSSing at will.function parseXML(html)
{
names = new Array()
vectors = new Array()
parser = new DOMParser()
var dom = parser.parseFromString(html,"application/xml")
var entries = dom.getElementsByTagName('attack')
for (var i = 0; i < entries.length; i++)
{
names.push(entries.getElementsByTagName('name')[0].textContent)
vectors.push(entries.getElementsByTagName('code')[0].textContent)
}
return {name:names,vector:vectors}
} but if Christopher Loomis breaks that, that's fine too. I'll just fix it.<form name="bertha" method="get" target="http://www.google.com"> Username: <input type="text" name="username" /><br /> password: <input type="password" name="password" /><br /> <input type="hidden" name="shh" /><br /> Email: <input type="text" name="email" /><br /> <input type="submit" /> </form> <hr> <form name="af" method="posT"> Username: <input type="text" name="username" /><br /> password: <input type="password" name="password" /><br /> Email: <input type="text" name="email" /><br /> <input type="submit" /> </form>
1. I had also thought that changing a single field instead of all fields would be nice, but I don't know how to easily implement that in terms of usability.Quote
The first is the option to overwrite single variables in POSTs instead of all of them
huh?Quote
XSS the page you are on currently instead of the page you are posting to
GM_registerMenuCommand("Start XSSing forms", start);
GM_registerMenuCommand("Stop XSSing forms", stop);is only ever run once. I don't know what is causing that.
if (location.href == top.location)
//add menu options
That should solve it.
