Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web :: Specific Sites :: b06-3131.htm

Technorati.com - XSS with cookie disclosure



Technorati.com - XSS with cookie disclosure
Technorati.com - XSS with cookie disclosure



Technorati.com=0D
=0D
Homepage:=0D
http://www.technorati.com=0D 
=0D
Affected files:=0D
=0D
login box=0D
Creating a new account input boxes=0D
=0D
=0D
Login box XSS vuln:=0D
By escaping quotes and using script tags, we can acomplish our XSS example. For PoC try putting the following code in the login box:=0D
=0D
">">">">'>'>'>"><"">">"><"<"<"<"<"<"<"<'<'=0D 
=0D
Screenshots:=0D
http://www.youducktard.com/xsp/technorati1.jpg=0D 
=0D
Our cookie data:=0D
=0D
This is remote text via xss.js located at youfucktard.com tvisitor=34.127.0.22.1150259450857579; TECHNORATI_MEMBER=4d5bd72bf6b2e71e5be9fa8dc3d99d7b=0D
=0D
------------------------------------------------=0D
=0D
Creatinga new profile input boxes:=0D
=0D
We use the same method as above, and since the "Emailaddress" box allows more characters then the others (=0D
<"">">'>'><"<"<'<'<"><"=0D
=0D
=0D
Spoofing forms to create XSS:=0D
=0D
Now, the forms to create a new account can also be spoofed, the only data that seemsto be checked are illegal characters in usernames and email addresses. Below are three screenshots of spoofing the create account form, the XSS example that results in it, and the technorati.com page loading normally after.=0D
=0D
Screenshots:=0D
http://www.youfucktard.com/xsp/technorati3.jpg=0D 
http://www.youfucktard.com/xsp/technorati4.jpg=0D 
http://www.youfucktard.com/xsp/technorati5.jpg=0D 
=0D
Technorati profile:=0D
http://www.technorati.com/profile/bonerbee=0D 
=0D


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH