Stuff I like

Lockerz has a major exploit in it’s redeem page. (Note you can only get there if the redeeming is up)

http://ptzplace.lockerz.com/welcome.php?m=f&e=” onMouonMouseOverseOver=alert(document.cookie); bullshit=”

You can see the page goes to the Failed to Login page and sets the username to the e parameter. You can hijack into the <input> tag by closing off the property string with a “-character, then putting your code in. onMouseOver is filtered out, so you need to put onMoonMouseOveruseOver or something like that to filter the mid of the word and merge the 2 sides to each other. After that, you can’t use any “-characters because it always puts a \ in front of them. To make strings, you can use String.fromCharCode(chrCode1, chrCode2, chrCode3) etc.. It’s that easy!

I’ve crafted a URL that sends the users’ cookie to my server as soon as their mouse hovers over the username field. This has proven to actually work, even when users are logged in to PtzPlace.

Note: I will be posting more of these blog posts.

Update: I think Lockerz fixed this. Haven’t got a confirmation though.

System administrators block certain files in network-traffic or your documents folders. Below are a few that are often forgot about.

• PIF – Shortcut to MS-DOS Program (Identical to EXE files) This was a new discovery for me too, actually…
• HTA – HTML Applications (Identical with HTML files, but with all permissions)
• JSE – Javascript Encoded Script File (Identical to JS files)
• VBE – Visual Basic Encoded Script File (Identical to VB or VBS files)
• WSF – Windows Script File (Can contain multiple scripts. More information)
• LNK – Shortcut (This is likely to be blocked, though)
• SCR – Screensaver (This is likely to be blocked, though)
• URL – Shortcut (This is likely to be blocked, though)

And that’s most of them. There’s a full list here.

I know I know, everybody already knows how to do this. Either use proxies or use the IP’s. Not many people know how to visit sites by it’s IP, so here’s a quick guide.

1. Go to http://network-tools.com/
2. Check the Ping field.
3. Enter the website you want to “unblock” in the field below. It says by default your IP address. Just enter a domain, for example: www.yoyogames.com
4. Click on GO!
5. You will see something similair to this:
   Ping 78.129.196.206
   [www.yoyogames.com]
6. Copy and paste the IP address, and put it in your browser URL bar like this: http://78.129.196.206/

And that’s it.

I know I haven’t posted a lot in a while and this is a fairly simple post. That is because I’m preparing for a much bigger blog post coming up in the next few days. Stay tuned. It’s gonna be an interesting read.

Edit: Or not. Depends..

Hello there! You might wonder.. (or not) what happened to my blog? Well, don’t worry. I still have a database backup. If you want to see an old post, just post a comment on this article.

So what happened? There are too many system admins doing their work wrong. You might know what I mean with that, or if you don’t, here’s a list:

• They block certain sites.
• They install a filter that disallows downloading of certain filetypes.
• They make all users non-admin users to disallow installation of programs onto the computer.
• They force us to use the worst web browser ever. (You know which one I mean. )
• They automatically remove all executables, batch files, rar and zip files, etc.

And more. All nice things to do, but usually there’s too many flaws in these security measures. I will cover all of the above points and more in future blogposts, so stay tuned.

Remember, this blog is not about hacking. It’s about pointing out the flaws IT professionals often make on their computer networks.

Ok guys as I found it extremely hard to achieve this I want to share how I finally managed to get it working.

Here’s a tutorial! Continue reading →