I have created a simple set of XSS vectors for people wanting to learn how to perform XSS.

Check it out here:-
http://www.thespanner.co.uk/2007/10/01/xss-attacks-a-practical-example/

I've also found out that Kishor did a similar but better example with regular expressions to make the injection harder, here's his excellent example:-
http://h4k.in/xssinexcess

------------------------------------------------------------------------------------------------------------
"People who say it cannot be done should not interrupt those who are doing it.";
labs : [www.businessinfo.co.uk]
blog : [www.thespanner.co.uk]
Hackvertor : [hackvertor.co.uk]



Edited 1 time(s). Last edit at 01/21/2008 05:45PM by Ronald.

Hi everyone,
I just want to share this little XSS workshop a friend posted to me:
http://blogged-on.de/xss/
I guess it doesnt challenge the most of you, but its good for beginners.
So if you are new to XSS, give it a try :)
have fun!



Edited 1 time(s). Last edit at 01/21/2008 05:44PM by Ronald.

Funny thing is - the guest book of the workshop is vulnerable like hell. I reported this months ago but no reaction...

http://preview.tinyurl.com/34okpz

http://preview.tinyurl.com/33dsfx

ohh ouch ...
well ... after you finished the XSS workshop you can proceed with the SQLi workshop :P

So mario: All cheaters have a small wee wee!

lol

How many of you didin't look for a XSS, and just putted in the address bar..
javascript:decipher(document.forms.cipher);alert(document.forms.cipher.stream.value);
??

Greetz!!

--------------------------------
http://sirdarckcat.blogspot.com/ http://www.sirdarckcat.net/ http://foro.elhacker.net/ http://twitter.com/sirdarckcat



Edited 1 time(s). Last edit at 09/16/2007 06:51PM by sirdarckcat.

Sirdarckcat: I'm guilty.
I don't have a small wee, honest!

- Ghozt

@sirdarckcat: Firebug console works just as well. :)

-tx @ lowtech-labs.org

... or adding a "<script> code </script>" to the sourcecode with opera ;)
but thats not what the workshop is about ;)

@Ronald: hehe - biting on the gold medal after winning is no cheating ;)

Stage1:
put
<script>decipher(document.forms.cipher); alert(document.forms.cipher.stream.value); document.forms.cipher.stream.value = document.forms.cipher.stream_copy.value;</script>

in search form. Pwd : stage2

Stage2:

hello !
i would try to use xss ehwn use bbcode.. how can i use in that?

@vskrisz81: Create your own thread instead of stealing this one.

can anybody suggest on how to pass the third stage? :)

just hit "search" and look at the url how the country is passed. Then modify it ;)

Ok deleted :-)

-berz3k.



Edited 1 time(s). Last edit at 10/30/2007 05:59PM by berz3k1.

is there a way to hide information on this forum, like a spoiler tag? otherwise I would like to ask you, berz3k1, to remove your walkthrough that others can have the same fun :)

edit: thanks, help for others is always appreciated anyways ;)



Edited 1 time(s). Last edit at 10/31/2007 07:30AM by Reiners.

Hi

Sorry but I see no different between the first Code and the Code of the Second from Stage2.

I would be happy about a advice.

the javascript "payload" is always the same, but on stage 2 you have to make sure that your javascript code fits into the html code correctly to get executed.

:-) stage 6 anyone there?

-berz3k.

edit: oOps, just noticed that you are the guy with the walkthrough... so you were not asking for help, do you? ;)



Edited 2 time(s). Last edit at 11/10/2007 08:38AM by Reiners.

Not a problem,

Some problems in stage 6 (solved), i ended the workshop and i posted something on guestbook

waiting the next stage XD

berz3k.
SYB securing!

hmmm stage 6 is making me think a little.
how do i stop it filtering out "< . anything in here. . >"?
i've tried all different translations, square brackets, but i just cant run a script.
guessing I cant call an alert without running a script can I?

Woohoo! did it, feels even better without cheating/help.
now to go apply my newly learnt knowledge to go steal cookies and breed worms.

The guest book's not there though:

"OOOoooops! Die Seite wurde nicht gefunden!
Erstmal Entschuldigung für die Umstände...
Das Auftreten dieses Fehlers kann folgende Ursachen haben: "

whatever that means.
I enjoyed that though thanks for writing/sharring it.

"OOOoooops! This page was not found!
Sorry for trouble...
The occurance of this error may have following causes:"

translated word by word, but it sounds starnge (not wrong or mis-understandable) originaly too ...

Any examples for this site?

Gareth - thanks for the links I'm checking them out now!

stuck on stage 3! The annoying thing is I got it to work 5 minutes ago!!

NOTE: XSS workshop for beginners has been merged from 2 threads, they basically say/do the same, and it's also made sticky.

Awesome thanks Ronald!!

It saves us having to answer the same questions over and over :)

------------------------------------------------------------------------------------------------------------
"People who say it cannot be done should not interrupt those who are doing it.";
labs : [www.businessinfo.co.uk]
blog : [www.thespanner.co.uk]
Hackvertor : [hackvertor.co.uk]

Good work but I bet very important parts of my body that people will ask anyways - being able to search and read is a privilege ;)