xss? erm...... site hack? how?

johntheripper2008 · Post by **johntheripper2008** » 26 Nov 2007, 13:57

ok guys im not quite sure under what subject this should go under so here it go's.

i was talkin to a guy i met on here and he was going on about me going onto google and searching "search filet:php" to find a website with a sreach box, once i found one then i use an xss script and hit enter.
if an alert box pops then i can hack the site using a shell or somthing.

whats this guy talking about?
any input?

Lyecdevf · Post by **Lyecdevf** » 26 Nov 2007, 15:08

http://www.google.com/search?hl=en&q=XS ... gle+Search

mo2332 · Post by **mo2332** » 26 Nov 2007, 16:02

how is it done?

bubzuru · Post by **bubzuru** » 26 Nov 2007, 18:05

mo2332 wrote:how is it done?

http://www.milw0rm.com/exploits/4103

http://xss-proxy.sourceforge.net/

johntheripper2008 · Post by **johntheripper2008** » 27 Nov 2007, 12:06

sorry, that dont help me very much

bubzuru · Post by **bubzuru** » 27 Nov 2007, 12:28

johntheripper2008 wrote:sorry, that dont help me very much

learn PHP

http://www.php.net/
http://www.wampserver.com/en/index.php

johntheripper2008 · Post by **johntheripper2008** » 27 Nov 2007, 12:29

lol hey check this out, pcworld have xss problems on there site lol