Comments on: Javascript for hackers part 2 http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/ A tool for designers dealing with programmers dealing with designers... Thu, 20 Nov 2008 22:21:19 +0000 http://wordpress.org/?v=2.6.2 By: Gareth Heyes http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-1223 Gareth Heyes Wed, 14 May 2008 21:22:29 +0000 http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-1223 @k Unicode and html entities would be the best cross platform solution:- <a href="http://www.businessinfo.co.uk/labs/hackvertor/hackvertor.php?input=PEBjX2xpbmtfMD48QGhleF9lbnRfNCgpPjxAY19qc18xPjxAdW5pXzMoXHUpPjxAY19hbGVydF8yPigxKTxAL2NfYWxlcnRfMj48QC91bmlfMz48QC9jX2pzXzE%2BPEAvaGV4X2VudF80PjxAL2NfbGlua18wPg%3D%3D" rel="nofollow">Example</a> @k

Unicode and html entities would be the best cross platform solution:-
Example

]]> By: k http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-1222 k Mon, 12 May 2008 04:06:23 +0000 http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-1222 This seems to work only on Firefox. No IE, Opera, Safari. Gareth, if you had to encode it so that it would work on most browsers, what code would you use? This seems to work only on Firefox. No IE, Opera, Safari.

Gareth, if you had to encode it so that it would work on most browsers, what code would you use?

]]> By: Gareth Heyes http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-1174 Gareth Heyes Tue, 18 Mar 2008 02:05:53 +0000 http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-1174 @loveshell It does work in IE but in certain circumstances and certain chars, yes I'm pretty sure it's defined in ecmascript. @loveshell

It does work in IE but in certain circumstances and certain chars, yes I’m pretty sure it’s defined in ecmascript.

]]> By: loveshell http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-1173 loveshell Tue, 18 Mar 2008 01:57:13 +0000 http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-1173 To take our vector a stage further we can also add backslash escapes, in javascript when a character is escaped that doesn’t have special meaning it is returned as normal. is it defined in ecmascript? it doesn't work in IE.... To take our vector a stage further we can also add backslash escapes, in javascript when a character is escaped that doesn’t have special meaning it is returned as normal.

is it defined in ecmascript?
it doesn’t work in IE….

]]> By: Gareth Heyes http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-1144 Gareth Heyes Mon, 18 Feb 2008 10:32:01 +0000 http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-1144 @josh <script>alert(/LOL/)</script> @josh

<script>alert(/LOL/)</script>

]]> By: Josh http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-1142 Josh Mon, 18 Feb 2008 09:41:50 +0000 http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-1142 <script>alert("hi");</script> <script>alert(”hi”);</script>

]]> By: Gareth Heyes http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-999 Gareth Heyes Wed, 12 Dec 2007 14:10:21 +0000 http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-999 Check this out :D 0/alert(1) Check this out :D
0/alert(1)

]]> By: Gareth Heyes http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-998 Gareth Heyes Wed, 12 Dec 2007 09:19:59 +0000 http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-998 @Marco @Master Ternary Li Glad you enjoyed them :) I'll do some more write ups if I find any new vectors @pdp Nice :) got anymore? @Marco @Master Ternary Li

Glad you enjoyed them :) I’ll do some more write ups if I find any new vectors

@pdp

Nice :) got anymore?

]]> By: pdp http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-995 pdp Wed, 12 Dec 2007 05:43:37 +0000 http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-995 too long for my taste 0..eval('alert(1)') works as well :) a few chars less too long for my taste

0..eval(’alert(1)’)

works as well :) a few chars less

]]> By: Master Ternary Li http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-993 Master Ternary Li Wed, 12 Dec 2007 03:17:39 +0000 http://www.thespanner.co.uk/2007/12/12/javascript-for-hackers-part-2/#comment-993 good writeup. it's nice having all of these vectors in place along with the explanatory text. All the recent bypasses to the PHPIDS have used these techniques (as i'm sure you know since you found them) :) good writeup. it’s nice having all of these vectors in place along with the explanatory text. All the recent bypasses to the PHPIDS have used these techniques (as i’m sure you know since you found them) :)

]]>