393 reputation
110
bio website
location
age
visits member for 2 years, 3 months
seen Dec 23 '13 at 0:49

Just a person.


Dec
22
asked How I add cookie to w3af for authenticated attacks?
Dec
6
accepted Need an explanation of Cross-Site Flashing?
Dec
6
comment Need an explanation of Cross-Site Flashing?
So if user input is reflected anywhere inside these dangerous parameters , than XSS can be exploited.Since GET is not an option.
Dec
6
comment Need an explanation of Cross-Site Flashing?
So if attacker finds url like this : demo.testfire.net/vulnerable.swf?loadMovieNumVar=XSS he can try to exploit xss issue?
Dec
6
asked Need an explanation of Cross-Site Flashing?
Nov
29
accepted I need explanation on how serious these vulnerabilities are?
Nov
28
comment I need explanation on how serious these vulnerabilities are?
Yes that is what I want to know I don't want to tell system admin : "Hey you have vulnerability , I can show my picture on your site" , seems kind of funny :) . Is there any way that this kind of "vulnerability" can be exploited any further. Seems like no other files can be included .
Nov
28
revised I need explanation on how serious these vulnerabilities are?
PIC uploaded
Nov
28
asked I need explanation on how serious these vulnerabilities are?
Oct
31
accepted How to show xss alert box when you are inside function in <script> tag?
Oct
31
comment How to show xss alert box when you are inside function in <script> tag?
Thanks for answering ,it seems that sometimes repairing broken function works and sometimes not. Thanks you gave me an idea.
Oct
31
asked How to show xss alert box when you are inside function in <script> tag?
Oct
23
accepted CSRF over post request without redirection?
Oct
23
comment CSRF over post request without redirection?
did it , messed up iframe css values so it didn't show anything.Thanks for help.
Oct
23
comment CSRF over post request without redirection?
How do I do that?
Oct
23
comment CSRF over post request without redirection?
I know that requests can be forged , I just wanted to know how to submit forged page post parameters without user knowing it , forging get request is easy but if you forge post request you get redirected.
Oct
21
asked CSRF over post request without redirection?
Sep
28
awarded  Commentator
Sep
5
accepted XSS inside CSS when " is encoded?
Sep
5
comment XSS inside CSS when " is encoded?
No , well I tried with <> and they are filtered (hexed) , and the solution you gave didn't work , thanks anyway.It seems I cant do anything. Btw, if you want to give it a try , this is my email maxonebt4@gmail.com , jyst email me and I'll give you site location.