2nd Problem is, This is your site. How do we know that you didn't actually make the exploit in your site? Do another site. Then I'll believe you. But when you own a Site you know your exploits so Yeah.
Sometimes when I'm on Deviant Art it says "internet explorer has prevented cross site scripting" and when I'm on FIrefox or Chrome, it just puts them on my computer and I got a virus that way once. luckily I fixed it, but now I only get on DA with IE cuz it blockks it. thanks for letting me know what it is ^^
When I realized that my cookies are getting stolen (+ a spyware installed), I was pissed off and flattered at the same time... I never knew certain individual(s) would be so concerned about what I do online and would go that far. But what can you do, because sometimes following user's activity is not enough :D. You have to know everything, hehe!
Thank you for the tutorial. by the way. is this seperveda cms available for everyone? where can i download it? because i want to try it. or i could use it for demonstration.
@bitbreaker why bother talking if you don't know whether what you're saying is so or not.
All browsers potentially have this vulnerability.
This tutorial is explaining it to you.
Do you think maybe some browsers know the difference between user contributed & web-designer supplied javascript ?
You're not the only person who has ever loudly said something that's in plain contradiction to the facts (Fox News . . ). But if you want any respect I suggest you try to avoid doing it in future.
@tomm174 Hello, dumbfuck. How are you doing? It has been a year since I posted that comment, I will agree with you that I did not know as much as I do now. If you don't bother check how old comments are, how do you know a person hasn't learn whether or not they were right when they even posted the comment? Oh, and bravo with your witty little insult... Fox News. If you want any respect, I suggest you off yourself and don't bother telling anyone... trust me... they won't care.
@bitbreaker Oh, and pardon my typos as well... I have better things to do with my time than troll videos and look to pick fights because I'm oh-so-intellectual and an arrogant bastard.
I am admin on a vbulletin forum and user data is sanitized so I don't think you can use java scripts. Is it still possible to be hit with an attack like this?
2nd Problem is, This is your site. How do we know that you didn't actually make the exploit in your site? Do another site. Then I'll believe you. But when you own a Site you know your exploits so Yeah.
rara12ify 6 months ago
wt hell r u guys talking about!!! = )
dbrunetti6770 6 months ago
well theres nothng serious happening on my pc but ccs is making my pc lag alot
Shady2viewer 7 months ago
Sometimes when I'm on Deviant Art it says "internet explorer has prevented cross site scripting" and when I'm on FIrefox or Chrome, it just puts them on my computer and I got a virus that way once. luckily I fixed it, but now I only get on DA with IE cuz it blockks it. thanks for letting me know what it is ^^
Diggler397 8 months ago
When I realized that my cookies are getting stolen (+ a spyware installed), I was pissed off and flattered at the same time... I never knew certain individual(s) would be so concerned about what I do online and would go that far. But what can you do, because sometimes following user's activity is not enough :D. You have to know everything, hehe!
therockfaerie666 10 months ago
Problem is, CSS stands for two things.
benjabean1 1 year ago 29
@benjabean1 That's why we call it XSS :P
asd123asd123kljlrja 11 months ago
@asd123asd123kljlrja In the description, it says, "'XSS' or 'CSS.'"
benjabean1 9 months ago
@benjabean1 cascading style sheet and counter strike source?
misterolichip 1 month ago
@benjabean1 Counter Strike: Source?
shroomboy666 3 weeks ago 2
@shroomboy666 y
TheAnonrandomguy 4 days ago
Thank you for the tutorial. by the way. is this seperveda cms available for everyone? where can i download it? because i want to try it. or i could use it for demonstration.
pdoox 1 year ago
Thanks, I'm studying for Security Plus and the books I read didn't really give any real examples I could relate with. This did it for me. Good Work
JLewinCO 1 year ago 6
well done, good tutorial
Anderie88 1 year ago
nice tut
crystosis 1 year ago
look at the browser he's using. firefox and chrome block this. the only way to do it is to download add-ons that allow script injection.
bitbreaker 1 year ago
@bitbreaker why bother talking if you don't know whether what you're saying is so or not.
All browsers potentially have this vulnerability.
This tutorial is explaining it to you.
Do you think maybe some browsers know the difference between user contributed & web-designer supplied javascript ?
You're not the only person who has ever loudly said something that's in plain contradiction to the facts (Fox News . . ). But if you want any respect I suggest you try to avoid doing it in future.
tomm174 5 months ago
@tomm174 Hello, dumbfuck. How are you doing? It has been a year since I posted that comment, I will agree with you that I did not know as much as I do now. If you don't bother check how old comments are, how do you know a person hasn't learn whether or not they were right when they even posted the comment? Oh, and bravo with your witty little insult... Fox News. If you want any respect, I suggest you off yourself and don't bother telling anyone... trust me... they won't care.
bitbreaker 5 months ago
@bitbreaker Oh, and pardon my typos as well... I have better things to do with my time than troll videos and look to pick fights because I'm oh-so-intellectual and an arrogant bastard.
bitbreaker 5 months ago
Good video. Where is the rock music?
calumtomeny 2 years ago
I am admin on a vbulletin forum and user data is sanitized so I don't think you can use java scripts. Is it still possible to be hit with an attack like this?
cvanich 2 years ago
@cvanich Sanitized user input is usually safe from this attack, unless the implementation of the sanitation is flawed in some way.
MyOverflow 1 year ago