o mica vulnerabilitate[google]

Pagini: 1

Moderat de Shocker

flo_flow
Vizitator

Foarte interesant putem accesa multe liste de url'uri ce contin date mai mult sau mai putin importante,depinde de cea ce cauti.Intrati si vedeti cu ochii vostri si va veti da seama imediat

Code:

http://sb.google.com/safebrowsing/update?version=goog-black-url:1:1

http://sb.google.com/safebrowsing/update?version=goog-black-url:1:7998

http://sb.google.com/safebrowsing/update?version=goog-white-domain:1:19,goog-white-url:1:371,goog-black-url:1:7693,goog-black-enchash:1:15282

Code:

http://sb.google.com/safebrowsing/update?version=goog-white-domain:1:19,goog-white-url:1:371,goog-black-url:1:7693,goog-black-enchash:1:15282

N30
Little Kevin
Postari: 82

Cum au encriptat pagina asta : http://144.131.138.116/www.paypal.com/w ... n-run5529/ ?
Uitati-va la sursa.

_______________________________________

Shocker
Super Moderator
Din: localhost
Postari: 2084

N30, uite-te ca prima data e: document.write(unescape(blabla)). Rezultatul la functia asta este:

Code:

<SCRIPT LANGUAGE="JavaScript">
var p,bc,bb,ib,u,B=14,TS=1<<B,MV=(1<<B)-1,MC=MV-1;
function hc_ic(s) {
if (p==s.length) return MV;
u=0;
var r;
while (bc<ib) {
 var c=s.charCodeAt(p++);
 if(c>127) {
  u=1;
  r=c;
  bb=0;
  bc=0;
  return r
 } else { 
  bb=(bb<<7)|c;
  bc=bc+7
 }
}
r=bb>>(bc-ib);
bb=bb^(r<<(bc-ib));
bc=bc-ib;
if(r==0) { 
 ib++;
 return hc_ic(s)
}
return r;
}

function hc_d0(s) { 
var o="";
p=0;
while(p!=s.length) { 
 bc=0;
 bb=0;
 ib=8;
 u=0;
 var l=s.length,ms=0,n=256,oc,c="",nc,ds="",d=new Array(TS),ar=new Array(),os="",ic=0;
 for(var i=0;i<TS;i++) { 
  if(i<256)d[i]=String.fromCharCode(i);
 else d[i]="" }
 oc=MV;
 while((nc=hc_ic(s))!=MV) {
  if(p>ms) {
   ms=ms+l/100;
   window.status="Uncompressing("+Math.ceil(p*100/l)+"%%)..."
  }if(u==1){os=os+String.fromCharCode(nc);
  if(os.length>80) { ar[ic++]=os;os="" }
  oc=MV;
  c=MV
 }
else { 
 if (oc==MV) ds=d[nc];
  else {
   if(nc>=n)ds=d[oc]+c;
    else ds=d[nc]}os=os+ds;
   if(os.length>80) { ar[ic++]=os;os="" }
   c=ds.charAt(0);
   if(n<=MC&&oc!=MV) { d[n++]=d[oc]+c; }
   oc=nc
  }
 }
 o=o+ar.join("")+os
}
window.status="";document.write(o)
}
</SCRIPT>

Aici sunt cele 2 functii de decriptare, vezi ca mai departe foloseste hc_d0(...blabla text encriptat...)

Ori a folosit un program cu care a facut asta foarte simplu, ori s-a chinuit sa faca functia manual si sa encripteze, blabla

P.S.: Ce vezi tu m-ai sus m-am chinuit eu sa aranjez sa arate mai frumos, initial era un singur rand

)

_______________________________________
ShockingSoft is back
Freakz only
Comics of the day

N30
Little Kevin
Postari: 82

OK. Mersi mult.

_______________________________________

Crash Override
Helper
Din: HackPedia
Postari: 275

Nu prea inteleg .
Shcker , ai putea sa imi dai niste detali ?

_______________________________________
Hacking.3xForum.Ro - Helper

Shocker
Super Moderator
Din: localhost
Postari: 2084

Uite-te in sursa site-ului postat de N30. Prima data vezi ca e

Code:

<SCRIPT LANGUAGE="JavaScript"><!--
document.write(unescape("%3C%52 ..blabla... %50%54%3E"));//--></SCRIPT>

Functia unsecape transforma ciudateniile alea in text normal, care e defapt script-ul care l-am postat in postul anterior.
document.write integreaza scriptul respectiv in pagina, pentru ca functiile declarate in scriptul acela [si anume hc_ic() si hc_d0] sa poata fi folosite pe parcurs.

Daca te mai uiti in sursa in continuare urmeaza doar chestii de genul:

Code:

<SCRIPT LANGUAGE="JavaScript">hc_d0("nF!xx0x7F,op45mpx%x")</SCRIPT><SCRIPT LANGUAGE="JavaScript">hc_d0("l7%cm34ngfu9o34X%`t")</SCRIPT>

Functia hc_d0 este o functie de decriptare, declarata in scriptul care l-am aratat mai sus. Daca te uiti bine, vezi ca functia hc_d0 se termina cu document.write, deci integreaza textul decriptat in pagina, textul decriptat fiind sursa originala a paginii

_______________________________________
ShockingSoft is back
Freakz only
Comics of the day

Crash Override
Helper
Din: HackPedia
Postari: 275

Gata am inteles ce nu imi dadeam seama , mersi .

_______________________________________
Hacking.3xForum.Ro - Helper

Topicuri similare

Pagini: 1

Mergi la