Cenzic 232 Patent
Paid Advertising
sla.ckers.org is
ha.ckers sla.cking
Sla.ckers.org
Bug reports, feature enhancements or other complaints with the site, with us or just tell us what a miserable existance you have. No death threats or poetry please. Just kidding, no poetry please. 

Current Page: 1 of 1
Results 1 - 5 of 5
4 years ago
pento
Hi, all! Does anybody know good vuln apps/projects for (like test examples for lint) testing code review tools like rats and lint?
Forum: Projects
4 years ago
pento
Does it work only in IE?
Forum: Bugs
4 years ago
pento
Action URL does not have any extention. So at the final ..there is only one probable scenario - some social engineering to make victim to fill this form field with custom text and submit it.
Forum: XSS Info
4 years ago
pento
Unfortunately: application/x-javascript
Forum: XSS Info
4 years ago
pento
There is a HTML form with AJAX submit. When data returns from server as JSON (including submitted data) it rendered in some div in page in unsecure way (yep, foo.innerHTML=bla-bla..). So if you navigate to this page and fill form with something like <script>alert(document.cookie)</script> then after submit you will see JavaScript alert with cookie data. Main problem is you can't use
Forum: XSS Info
Current Page: 1 of 1