Cenzic 232 Patent
Paid Advertising
sla.ckers.org is
ha.ckers sla.cking
Sla.ckers.org
Q and A for any cross site scripting information. Feel free to ask away. 
Go to Topic: PreviousNext
Go to: Forum ListMessage ListNew TopicSearchLog In
Out of SSL zone?
Posted by: SW
Date: April 13, 2010 04:05AM

When you get a persistent XSS in a secure page, and you want to transfer data out (logging, email, etc) without having warnings pop up in IE, is there any good free options?

Options: ReplyQuote
Re: Out of SSL zone?
Posted by: Skuld
Date: April 17, 2010 01:34AM

Send it to a site with a valid SSL cert. There may be some free hosts with SSL or you could try sending the data to a site with SSL and exposed logs.

Options: ReplyQuote
Re: Out of SSL zone?
Posted by: SW
Date: April 23, 2010 10:55PM

Well I didn't find any with 5 min of googling so I decided to store the information on same domain, then leak it from non-secure page.

Options: ReplyQuote


Sorry, only registered users may post in this forum.