pro(re)gress

A list of chat, live chat scripts. https://sourceforge.net/projects/webberchat/ https://sourceforge.net/projects/icsc/ https://sourceforge.net/projects/ajax-chat/ https://sourceforge.net/projects/cconnect/ https://sourceforge.net/projects/phpchatter/ http://www.craftysyntax.com/ http://code.google.com/p/php-lively/ http://mibew.org/ http://www.reallinkchat.com/ http://www.helpcenterlive.com/ http://www.chattist.com/ Under testing

Talibans could attack the usa's website too :) lol. I don't want to offend anybody ... it's just to say something funny. And I've warned the tech support instead of defacing the website as someone else could have done for a lot of popularity. http://answers.usa.gov/cgi-bin/gsa_ict.cfg/php/enduser/chat.php sample "><script>alert(document.cookie);</script><" with a more elaborated (external) script you can create a phishing page with a different chat. With a bit of social engineering and an external script (my post2get.php ?) you can even grab the cookies. I've already grabbed a session id but without luck (I don't know the administrative/login/authentication pages (and I don't want to know them 8) ). Remote code execution. Input is not sanitized. http://answers.usa.gov/cgi-bin/gsa_ict.cfg/php/   <- any file from the url As a proof I've contacted them via the (same) chat. ----------------------...