Javascript injection help
Okay, first of all, I hope you didn't include the italics tags. If you did, don't! - that tells me that you copied it straight out of a article or forum without doing any research on the subject. Look up javascript - use google, go to w3schools.com. There are a million ways to confirm information before using it. You can't just take one source and expect it to be correct everytime. If something that you read somewhere doesn't work - look elsewhere.
So, the task at hand for you is as follows:
-
Look up italics tags - hint: you will find them in html information. Once you figure out what they are and what they are used for - exclude them from your javascript command.
-
look up javascript commands - hint: go to www.w3schools.com - you will find a nice javascript tutorial link on their first page- go to it and read up.
rofl… What are you talking about amigo?!… Do you know what cookies do?!… … … Cuz it's definetly not that… Cookies store information about you, it's like handing out name tags after you login… It's information that's specific to you usually… Then on other pages throughout the website they're able to identify who you are based on the cookie information that was assigned to you at login… There's nothing in the cookie that's gonna help you get other user's information!!!… If you can somehow manage to get other peoplez cookie information tho (ie. xss attack) then you can sometimes use a javascript injection to "steal their identity" and login as them… Try google?… Maybe consider reseach?…
Oh and i wanted to know…….WHy doesnt this injection work on the guestbooks when it try using it…<img src="javascript:alert('noob')">.I put that in a guestbook….i made sure that it was vulnerable with html….i put the <u> tags on to see if it worked….it did….then i put <img src="javascript:alert('noob')"> in the guestbook and i didnt see any pop up come up saying noob…What am i doing wrong?Thanks.
Oh and i wanted to know…….WHy doesnt this injection work on the guestbooks when it try using it…<img src="javascript:alert('noob')">.I put that in a guestbook….i made sure that it was vulnerable with html….i put the <u> tags on to see if it worked….it did….then i put <img src="javascript:alert('noob')"> in the guestbook and i didnt see any pop up come up saying noob…What am i doing wrong?Thanks.
rofl
you started it out with an image, that means that what comes after needs to be the url of an image, not a javascript. you can find out how to embed javascript into an image, that will work. also, just because something is html injectable doesnt mean it will accept javascript. try going to w3 and looking at the javascript tutorial. it will show u how to make a popup.