<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>hiredhacker.com &#187; exploit</title>
	<atom:link href="http://www.hiredhacker.com/tag/exploit/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.hiredhacker.com</link>
	<description>relevant ramblings of an ethical hacker</description>
	<lastBuildDate>Sat, 05 Jun 2010 17:36:30 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>StatPress/StatPress Reloaded &#8211; SQL Injections</title>
		<link>http://www.hiredhacker.com/2008/11/03/statpressstatpress-reloaded-sql-injections/</link>
		<comments>http://www.hiredhacker.com/2008/11/03/statpressstatpress-reloaded-sql-injections/#comments</comments>
		<pubDate>Mon, 03 Nov 2008 16:36:27 +0000</pubDate>
		<dc:creator>Gerry Eisenhaur</dc:creator>
				<category><![CDATA[Content]]></category>
		<category><![CDATA[0day]]></category>
		<category><![CDATA[advisory]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[sql injection]]></category>

		<guid isPermaLink="false">http://www.hiredhacker.com/?p=82</guid>
		<description><![CDATA[iriStatAppend() // URL (requested) $urlRequested = iri_StatPress_URL(); ... $referrer = (isset($_SERVER['HTTP_REFERER']) ? htmlentities($_SERVER['HTTP_REFERER']) : ''); ... $insert = "INSERT INTO " . $table_name . " (date, time, ip, urlrequested, agent, referrer, search,nation,os,browser,searchengine,spider,feed,user,timestamp) " . "VALUES ('$vdate','$vtime','$ipAddress','$urlRequested','" . addslashes(strip_tags($userAgent)) . "','$referrer','" . addslashes(strip_tags($search_phrase)) . "','" . iriDomain($ipAddress) . "','$os','$browser','$searchengine','$spider','$feed','$userdata->user_login','$timestamp')"; $results = $wpdb->query($insert); iri_StatPress_Vars() if (strpos(strtolower($body), "%thistotalvisits%") [...]]]></description>
		<wfw:commentRss>http://www.hiredhacker.com/2008/11/03/statpressstatpress-reloaded-sql-injections/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>XSS in WP Contact Form III.</title>
		<link>http://www.hiredhacker.com/2008/02/02/xss-in-wp-contact-form-iii/</link>
		<comments>http://www.hiredhacker.com/2008/02/02/xss-in-wp-contact-form-iii/#comments</comments>
		<pubDate>Sat, 02 Feb 2008 17:46:20 +0000</pubDate>
		<dc:creator>Gerry Eisenhaur</dc:creator>
				<category><![CDATA[Content]]></category>
		<category><![CDATA[0day]]></category>
		<category><![CDATA[advisory]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[wordpress]]></category>
		<category><![CDATA[xss]]></category>

		<guid isPermaLink="false">http://www.hiredhacker.com/2008/02/02/xss-in-wp-contact-form-iii/</guid>
		<description><![CDATA[The WP Contact Form III 1.4.1 WordPress plugin by &#8216;KristinKWangen&#8217; is vulnerable to multiple cross site scripting attacks. Note to developers, this does not stop script injection attacks: From wp-contactform.php line 105: $_POST['wpcf_your_name'] = stripslashes(trim($_POST['wpcf_your_name'])); Also note that this is not a very good way to die: From buttonsnap.php line 28: $selection = isset($_POST['selection']) ? [...]]]></description>
		<wfw:commentRss>http://www.hiredhacker.com/2008/02/02/xss-in-wp-contact-form-iii/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>More Chrome Directory Traversing.</title>
		<link>http://www.hiredhacker.com/2008/01/31/more-chrome-directory-traversing/</link>
		<comments>http://www.hiredhacker.com/2008/01/31/more-chrome-directory-traversing/#comments</comments>
		<pubDate>Thu, 31 Jan 2008 05:25:57 +0000</pubDate>
		<dc:creator>Gerry Eisenhaur</dc:creator>
				<category><![CDATA[Content]]></category>
		<category><![CDATA[0day]]></category>
		<category><![CDATA[advisory]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[firefox]]></category>
		<category><![CDATA[researching]]></category>

		<guid isPermaLink="false">http://www.hiredhacker.com/2008/01/31/more-chrome-directory-traversing/</guid>
		<description><![CDATA[Mozilla marked Bug ID 413250 as &#8216;RESOLVED FIXED&#8217; on Tuesday. I got a chance to check out the fix today, and found that the fix is inadequate in stopping the attack. Here&#8217;s another demo that reads your session store, and like before, uses the Download Statusbar extension. steal_sessionstore2.html.]]></description>
		<wfw:commentRss>http://www.hiredhacker.com/2008/01/31/more-chrome-directory-traversing/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Firefox chrome: URL Handling Directory Traversal.</title>
		<link>http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/</link>
		<comments>http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/#comments</comments>
		<pubDate>Sat, 19 Jan 2008 08:35:24 +0000</pubDate>
		<dc:creator>Gerry Eisenhaur</dc:creator>
				<category><![CDATA[Content]]></category>
		<category><![CDATA[0day]]></category>
		<category><![CDATA[advisory]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[firefox]]></category>
		<category><![CDATA[researching]]></category>

		<guid isPermaLink="false">http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/</guid>
		<description><![CDATA[I spent some time tonight with scripting access to chrome files and found that Firefox doesn&#8217;t properly handle escaped characters. Its possible to load any javascript file on a victims machine. This attack is similar to previously disclosed vulnerabilities but is not constrained to basic Firefox files. To exploit this the victim needs to have [...]]]></description>
		<wfw:commentRss>http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/feed/</wfw:commentRss>
		<slash:comments>46</slash:comments>
		</item>
		<item>
		<title>0day RealPlayer Exploit Code.</title>
		<link>http://www.hiredhacker.com/2008/01/04/0day-realplayer-exploit/</link>
		<comments>http://www.hiredhacker.com/2008/01/04/0day-realplayer-exploit/#comments</comments>
		<pubDate>Sat, 05 Jan 2008 04:18:50 +0000</pubDate>
		<dc:creator>Gerry Eisenhaur</dc:creator>
				<category><![CDATA[Content]]></category>
		<category><![CDATA[0day]]></category>
		<category><![CDATA[exploit]]></category>

		<guid isPermaLink="false">http://www.hiredhacker.com/2008/01/04/0day-realplayer-exploit/</guid>
		<description><![CDATA[I grabbed this off of some hacked servers in China, nothing special but some people where asking for it. Drop me a line and I will email the actual html/js files if your interested. Sorry for the bad formatting, but you get the point. S(); function S() { var user = navigator.userAgent.toLowerCase(); if (user.indexOf("msie 6") [...]]]></description>
		<wfw:commentRss>http://www.hiredhacker.com/2008/01/04/0day-realplayer-exploit/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>WassUp WordPress Plugin Vulnerabilities.</title>
		<link>http://www.hiredhacker.com/2008/01/04/wassup-wordpress-plugin-vulnerabilities/</link>
		<comments>http://www.hiredhacker.com/2008/01/04/wassup-wordpress-plugin-vulnerabilities/#comments</comments>
		<pubDate>Sat, 05 Jan 2008 00:37:48 +0000</pubDate>
		<dc:creator>Gerry Eisenhaur</dc:creator>
				<category><![CDATA[Content]]></category>
		<category><![CDATA[0day]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[webappsec]]></category>
		<category><![CDATA[xss]]></category>

		<guid isPermaLink="false">http://www.hiredhacker.com/2008/01/04/wassup-wordpress-plugin-vulnerabilities/</guid>
		<description><![CDATA[WassUp is a new WordPress plugin to track your visitors in real time. It has a very readable and fancy admin console to keep tracks of your blog’s users visits. It has a &#8220;current visitors online&#8221; view and a more detailed &#8220;visitors details&#8221; view where you can know almost everything your users are doing on [...]]]></description>
		<wfw:commentRss>http://www.hiredhacker.com/2008/01/04/wassup-wordpress-plugin-vulnerabilities/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Hacking AOL</title>
		<link>http://www.hiredhacker.com/2007/12/13/hacking-aol/</link>
		<comments>http://www.hiredhacker.com/2007/12/13/hacking-aol/#comments</comments>
		<pubDate>Thu, 13 Dec 2007 20:01:46 +0000</pubDate>
		<dc:creator>Gerry Eisenhaur</dc:creator>
				<category><![CDATA[Content]]></category>
		<category><![CDATA[0day]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[hacking]]></category>
		<category><![CDATA[webappsec]]></category>
		<category><![CDATA[xss]]></category>

		<guid isPermaLink="false">http://www.hiredhacker.com/2007/12/13/hacking-aol/</guid>
		<description><![CDATA[I had some free time today and after about 10 minutes of poking around AOL&#8217;s web services, I came to the conclusion that their developers have no concept of security. Every AOL domain I looked at had multiple XSS holes on basically every page. They ranged from random subdomains like: http://autos.aol.com/ http://finance.aol.com/ To more serious [...]]]></description>
		<wfw:commentRss>http://www.hiredhacker.com/2007/12/13/hacking-aol/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
	</channel>
</rss>
