Mutillidae: Born to be Hacked
|
|
|
|
Site hacked...err...quality-tested with Samurai WTF, Backtrack, Firefox, Burp-Suite, Netcat, and
these Mozilla Add-ons
Developed by Adrian " Irongeek" Crenshaw and Jeremy Druin |
Set Background Color
|
-
Cascading Style Injection: This injection uses a different syntax but the
methodology to exploit is the same.
- Inject arbitrary input then check the resulting response for your input
- To inject HTML or JavaScript into the style, look to close off the style, then
start the injection, then comment out the remaining part of the style or complete
the remaining part with valid syntax.
- Example Target:<body style="color:#{dynamic input}">
- Possible Solution: style="<body color:#""><H1>HELLO WORLD</H1><br anything="">
|
|
Back