Scrape using fopen cookies

XSS - Part 2 (Cookie stealing and Defacement)

http://digitalpbk.blogspot.com/2006/12/xss-part-2-cookie-stealing-and.html XSS - Part 2 (Cookie stealing and Defacement) Please note that this article is for educational purposes only, and is targeted at webmasters who have never seen this scenario. Please donot harm anyone. Disclaimer : I am not responsible for any damages arising due to methods specified in this page. Webmasters please fix it ASAP.In the first part we injected javascript successfully, and we got an alert. Now let us move to step 2 , defacing and cookie stealing.Cookie Stealing using XSSCookie ...

Wordpress nextGEN gallery XSS (Cross site scripting) Cookie Stealing Vulnerability

http://digitalpbk.blogspot.com/2009/07/wordpress-nextgen-gallery-xss.html Wordpress nextGEN gallery XSS (Cross site scripting) Cookie Stealing Vulnerability IntroNow I need not tell what actually an XSS is, for that refer to here. To see what I mean check out the links given below. If you are using NextGen wordpress plugin, you are probably infected.the VulnerabilityThe vulnerability on this wordpress plugin is seen in the pid, album, gallery GET variables. http://www.example.com/wordpress/next-gen-gallery/?album=1&pid=3&gallery=2The GET variables on most ...

PHP file_get_contents giving garbled output

http://digitalpbk.com/php/file_get_contents-garbled-gzip-encoding-website-scraping PHP file_get_contents giving garbled output Are you getting garbled values when using file_get_contents fetching an external URL (website scrapping using php) and wondering what went wrong ? The content is appearing to have wierd characters instead of normal HTML output because of GZIP output encoding by the website you are fetching. You can fix this issue in multiple ways. Method 1 : Accept-Encoding In this method we set the request headers so that the webserver is forced to respond ...

Base 64 Encoding

http://digitalpbk.blogspot.com/2006/12/base-64-encoding.html :VGhpcyBpcyBhbiBleGFtcGxlIG9mIGJhc2U2NCBlbmNvZGluZy4=which stands for This is an example of base64 encoding.You can find out more about this on googleEnter your search termsSubmit search formGoogle CookieBase64 encoding is used in more than email systems, it is used in URL encoding of binary data. Those using google mail will have seen a stream of letters on their address bar. This base64 encoding of data. Google cookie or in short Gookie also use Base64 encoding to store data. The SID is a base64 encoding. Similarly ...

Dataone Account Usage Checker in PERL

http://digitalpbk.blogspot.com/2008/06/free-dataone-account-usage-checker-perl.html Dataone Account Usage Checker in PERL The following Script in PERL is a Dataone account usage checker.#!/usr/bin/perl# http://digitalpbk.blogspot.com/2008/06/free-dataone-account-usage-checker-perl.htmluse WWW::Mechanize;use HTTP::Cookies;use HTTP::Request::Common;my $verbose = 0;my $username;my $password;my $url="http://10.240.64.195/weblogin.jsp";for(my $i=0;$i{ if($ARGV[$i] eq "-v" or $ARGV[$i] eq "--verbose"){ $verbose = 1; } elsif($ARGV[$i] eq "-u" ...

Perl Script to Login to Orkut

http://digitalpbk.blogspot.com/2007/05/perl-script-to-login-to-orkut.html and GET the redirect page URLGoto the redirect pageGoto Orkut.com/home.aspxYour done.Note:Tested on Linux (FC6, Perl 5.8.8)The following script is for linux, Will run on Windows too but the ANSI coloring may not work...Windows Program is given below the program for Linux (without ANSI coloring).For Linux (with ANSI coloring)use WWW::Mechanize;use HTTP::Cookies;use HTTP::Request::Common;$cj=HTTP::Cookies->new(file => "cookie.jar",autosave=>1,ignore_discard=>1);$mech ...

Solve "Cannot modify header information - headers already sent by *.php"

http://digitalpbk.com/php/warning-cannot-modify-header-information-headers-already-sent Solve "Cannot modify header information - headers already sent by *.php" Warning: Cannot modify header information - headers already sent by somefile.php (output started at somefile.php:###) in somefile.php on line ### This Warning is shown by PHP when you use the header function to output headers or use the setcookie function to set cookies after any echo or content which is not inside PHP tag. Hello World !!! Both should throw this warning. You can disable ...

C Code to convert JPEG to BMP in LINUX using libjpeg

http://digitalpbk.blogspot.com/2009/01/code-libjpeg-converting-jpeg-to-bmp.html C Code to convert JPEG to BMP in LINUX using libjpeg IntroThe following code converts JPEG file into BMP file. The code requires the libjpeg library. The following code is a good example of how to use the libjpeg library. (it compiles). Code converts colour jpeg to 24bit BITMAP.Code : jpeg2bmp.c#include #include #include #include /* we will be using this uninitialized pointer later to store raw, uncompressd image */unsigned char *raw_image = NULL;/* dimensions of the image we want to write ...

CAPTCHA - What ?

http://digitalpbk.blogspot.com/2007/07/captcha-what.html only moderately secure (ie Keeps the kids away)Now on the checking part the users text is passed through the same hashing function and top-secret function. Then the cookie value and the newly calculated value is compared to catch the bot ;)....A disadvantage of using CAPTCHA is for the visually challenged people. People with unclear eyesights colour blindness etc may face a problem in reading the CAPTCHA code. So the other CAPTCHA method is to use an AUDIO file, an MP3 instead of a JPEG or PNG ...

Introduction to XSS Part 1

http://digitalpbk.blogspot.com/2006/12/introduction-to-xss-part-1.html from phishing, cookie stealing, defacement etc(Bookmark me and wait for more on this topic).This is the case of simple sites that are not well made. Well made sites like google, yahoo and hotmail take this issue into serious consideration and have filters. Finding an XSS hole there is tough. However some weak filters can be bypassed using the technologies mentioned in XSS Cheat SheetMessage to Webmasters (specially of PropMart.com)This article was written for you. Please provide a filter from ...