Nextgen gallery hacked

Wordpress nextGEN gallery XSS (Cross site scripting) Cookie Stealing Vulnerability

http://digitalpbk.blogspot.com/2009/07/wordpress-nextgen-gallery-xss.html Wordpress nextGEN gallery XSS (Cross site scripting) Cookie Stealing Vulnerability IntroNow I need not tell what actually an XSS is, for that refer to here. To see what I mean check out the links given below. If you are using NextGen wordpress plugin, you are probably infected.the VulnerabilityThe vulnerability on this wordpress plugin is seen in the pid, album, gallery GET variables. http://www.example.com/wordpress/next-gen-gallery/?album=1&pid=3&gallery=2The GET variables on most ...

Google Gone Mad or Hacked?

http://digitalpbk.blogspot.com/2009/01/google-gone-mad-or-hacked.html Google Gone Mad or Hacked? Google Hacked or Gone Mad ?Here is the search results for the term "Google" on the google.com, see that it shows "This site may harm your computer." on all the sites. Check out the Screenshot.Try for yourself, and let me know..Has Google Gone mad ? ...

XSS on JustDial.com

http://digitalpbk.blogspot.com/2007/04/xss-on-justdialcom.html XSS on JustDial.com JustDial.comSaw the ad a few days back on the TV, so thought could play with it. As expected, they haven't thought/bothered about Cross Site Scripting !Just search for our usual keyword : alert("XSS"); and you can get alerts.The reason for most XSS holes is due to the use of Microsoft's Active Server Pages (ASP). ASP does not have much default functions or modules to combat XSS. Whereas PHP has a number of functions to do the same.Happy Hacking ... ...

CHDK for Canon SX120 IS Camera ( Canon Hack Development Kit )

http://digitalpbk.com/hardware/canon-sx120-chdk-camera-canon-hack-development-kit CHDK for Canon SX120 IS Camera ( Canon Hack Development Kit ) CHDK is not yet officially released for Canon SX 120 IS, but I found a development version which works for my Canon SX 120 IS. About CHDK For those who are wondering what a CHDK is, it is Canon Hack Development Kit. CHDK is an alternative firmware that is available for all Canon models. But it is not ported to all models including my Canon SX120 IS Camera. With CHDK we can shoot more professional photographs with ordinary ...

Google Search for Pro's

http://digitalpbk.blogspot.com/2007/03/google-search-for-pros.html Google Search for Pro's IntroGoogle is more than simply search engine, it is a multi faceted tool which can be used by professionals in all ventures. Here is the google language for searching : [site:]This modifier is used to limit search results to a specified site. Eg:orkut hacks site:digitalpbk.blogspot.com[allintitle:]This modifier when used will limit all your search queries to within the title. Eg: allintitle:the digital me [intitle:]This modifier when used will limit first search ...

XSS on GrazeIt.com

http://digitalpbk.blogspot.com/2007/01/xss-on-grazeitcom.html XSS on GrazeIt.com Recently while grazing over the net, I found this site grazeit.com. This is a site which keeps a database of good websites found on the net by netizens. But there is an XSS hole (Cross site scripting ) on the site which allow users to redirect the page to any desired location.Of course this hack does not work on the secure browser Mozilla Firefox. If you are not using Firefox, download for free (The link is given bottom right).Probably you arrived at this page from grazeit ...

FTPCHK3 : Virus that adds malicious scripts to your website.

http://digitalpbk.blogspot.com/2009/10/ftpchk3-virus-php-pl-hacked-website.html .#!/usr/bin/perl# http://digitalpbk.blogspot.com/2009/10/ftpchk3-virus-php-pl-hacked-website.htmluse strict;`grep -Rn aWYoIWlzc2V0KCRiMHNyMSkpe2Z1bmN0aW9u * | cut -d ':' -f 1 > listofinfected`;open FP,"listofinfected";my $file;while($file = ){ print "Testing $file ... "; chomp($file); if(-e ($file)){ open VI,$file; my @filecon = ; close VI; if($filecon[0] =~ m/aWYoIWlzc2V0KCRiMHNyMSkpe2Z1bmN0aW9u/){ $filecon[0] =~ s ...

Introduction to XSS Part 1

http://digitalpbk.blogspot.com/2006/12/introduction-to-xss-part-1.html Introduction to XSS Part 1 This document is purely for illustrative purposes only. I am not responsible for any losses arising to the websites mentioned below. Webmasters please be more alert...What is it?XSS stands for cross site scripting (CSS) Since CSS is already taken by Cascaded Style Sheets, it is named XSS X standing for a Cross. It is a kind of hacking which allows you to deface websites, loggin as another user etc. IntroductionLet us start by looking how websites work. Starting ...