| Author | Message |
|---|
RoLex
2009-03-09
11:40:33
|
| Quote | | Testing the signature.
____________________
You are what you eat.
|
|
RoLex
2009-03-09
11:43:11
|
| Quote | | Lol, signature is stored in cookies, didn't know that. :P
____________________
You are what you eat.
|
|
RoLex
2009-03-09
11:45:08
|
| Quote | | No, now I'm lying, it's stored in HexHub. I had to set it for 3'rd time for some reason, probably maintenance issue. Nevermind.
____________________
You are what you eat.
|
|
Vektor
2009-03-09
20:01:14
|
| Quote | | I had to restart a few times to update the hub and I didn't save settings because I had to correct some errors in the procedures that update user profiles. |
|
[-TE-]-RoLex
2009-08-10
00:59:14
|
| Quote | | tЂst vs t€st
____________________
']['€AM€LiT€
|
|
[-TE-]-RoLex
2010-10-02
12:53:33
|
| Quote | | It seems that & character is not properly replaced causing the invalid URL: http://test.me/
____________________
']['€AM€LiT€
|
|
[-TE-]-RoLex
2010-10-02
12:55:15
|
| Quote | | [-TE-]-RoLex wrote: | | It seems that & character is not properly replaced causing the invalid URL: http://test.me/']['€AM€LiT€ |
|
Here is the code that I see after posting the above URL:
| Code: | | <A href="http://test.me/?par1=ok&par2=bad">http://test.me/</A> |
|
Above is incorrect. Please fix.
Thank you.
____________________
']['€AM€LiT€
|
|
[-TE-]-RoLex
2010-10-02
12:56:30
|
| Quote | | You can't visually see the above bug, open the site source to see the problem.
____________________
']['€AM€LiT€
|
|
[-TE-]-RoLex
2010-10-05
14:34:48
|
|
[-TE-]-RoLex
2010-10-05
14:35:59
|
|
[-TE-]-RoLex
2010-10-05
14:38:27
|
|
[-TE-]-RoLex
2010-10-05
14:40:30
|
|
[-TE-]-RoLex
2010-10-05
14:41:16
|
|
[-TE-]-RoLex
2010-10-16
22:04:27
|
|
[-TE-]-RoLex
2010-10-16
22:24:10
|
| Quote | testing new html button feature
wont work:
maybe works:
____________________
']['€AM€LiT€
|
|
[-TE-]-RoLex
2010-10-16
22:34:45
|
| Quote | see if this works
____________________
']['€AM€LiT€
|
|
[-TE-]-RoLex
2010-10-16
23:08:07
|
| Quote | none of above examples work, i have a possible solution:
| Code: | [00:18:05] <Lexus>
[button=http://www.alexa.com/audituser/register email=<br /><br /><img src=http://nemesis.te-home.net/img/logo.jpg /><br /><br /><a href=http://nemesis.te-home.net/>http://nemesis.te-home.net/</a><br /><br />]XSS[/button]
[00:19:40] <Lexus> hm, this new hexhub feature with buttons, the var_list is separated by spaces, and my value contains spaces, so it will be misparsed. how do i cover those spaces?
[00:25:09] <Lexus> the button doesnt work, hmm
[00:26:44] <Lexus>
<form method="post" action="http://www.alexa.com/audituser/register">
<input type="hidden" name="email" value="<br /><br /><img src=http://nemesis.te-home.net/img/logo.jpg /><br /><br /><a href=http://nemesis.te-home.net/>http://nemesis.te-home.net/</a><br /><br />" />
<input type="submit" value="XSS" />
</form>
[00:28:15] <Lexus> this one works (written manually), but it contains real spaces
[00:28:24] <Lexus> so how do i solve this problem ?
[00:36:39] <Lexus> LZ, maybe you should make the button tag differently...
[00:50:05] <Lexus>
[button=<url> <button name>]
[butvar=<var_name>]<var value>[/butvar]
[butvar=<var_name_2>]<var value 2>[/butvar]
etc.
[/button]
[00:51:36] <Lexus> butvar tag should be ignored outside button tag btw
[00:51:40] <Molotov> "buttvar"
[00:51:42] <Lexus> this will work ok i thinks |
|
____________________
']['€AM€LiT€
|
|
Vektor
2010-10-18
16:16:40
|
|
[-TE-]-RoLex
2010-10-18
16:21:54
|
| Quote |
____________________
']['€AM€LiT€
|
|
