Mark Zuckerberg's Facebook Fanpage Was Hacked

"Let the hacking begin: If facebook needs money, instead of going to the banks, why doesn't Facebook let its users invest in Facebook in a social way? Why not transform Facebook into a ‘social business' the way Nobel Price winner Muhammad Yunus described it? http://bit.ly/fs6rT3 What do you think? #hackercup2011"

Read more: http://techland.time.com/2011/01/26/mark-zuckerbergs-facebook-page-was-hacked-everybody-panic/#ixzz1CI7IV8pQ

How To Setup Static IP Address in Fedora 14

First go to

System > Preferences > Network Connections

Choose your device which in my case I'm using wired.

Choose and click edit.


Then go to IPv4 Setting tab.
And set the Method : Manual.
Click Add to put your static IP.
Put your desire Dns Server.

Then finally click apply.

Done :)

FOTOROLL Search Application Vulnerable to XSS

FOTOROLL Search Application Vulnerable to XSS

# Found : by p0pc0rn
# Date : 07 - 01 - 2011
# Website : http://fotoroll.com


XSS
====

www.site.com/search?src=xx&q=[XSS]



Screenshot
==========



http://img443.imageshack.us/img443/7476/screenshotuma.png
http://img694.imageshack.us/img694/8748/screenshot1nf.png


Status
=======
Reported


Thanks

p0pc0rn

Multiple Non-Persistent XSS in lyris.pl

Multiple Non-Persistent XSS in lyris.pl

Found : by p0pc0rn on 06/01/2011
Website : http://www.lyris.com/

XSS 1
======

www.site.com/a/lyris.pl?enter=[XSS]

XSS 2
======

www.site.com/b/lyris.pl?visit=[XSS]


Screenshot
==========



http://img408.imageshack.us/img408/5210/screenshotqrz.png
http://img524.imageshack.us/img524/9601/screenshot1omg.png

Status
======
Reported on 06/01/2011

Thanks

p0pc0rn

Electronic Thesis and Dissertation Library Non Persistent XSS

Electronic Thesis and Dissertation Library Non Persistent XSS

found : 5/01/11 by p0pc0rn

XSS 1
======

http://www.site.com/a/b/first_letter=[XSS]

XSS 2
======

http://www.site.com/a/b/login
POST:[XSS]


Screenshot
===========


http://img802.imageshack.us/img802/9625/screenshotos.png
http://img140.imageshack.us/img140/789/screenshot1we.png

Thanks

p0pc0rn

How to Change Login Background in Fedora 14

1 - copy your wallpaper to the
/usr/share/backgrounds/laughlin/default/wide/
/usr/share/backgrounds/laughlin/default/standard/
/usr/share/backgrounds/laughlin/default/normalish/

make sure you do it with root privilige.

2 - go to the /usr/share/backgrounds/laughlin/default/ directory
3 - edit the laughlin.xml using vi

4 - change the wallpaper to your wallpaper that just copied before.


5 - Save, and complete!

You can see your login page with a new wallpaper.

kudos to http://aenguillo.wordpress.com

Transmission for your Centos

What is transmission?
If u know about torrentflux,so this transmission is the alterantive to torrentflux.

Website : http://www.transmissionbt.com

Its easy to setup this transmission to your server.
thanks to y0nd13 coz introduced this thing to me and lollerskates from transmission forum for his easy tutorial on how to setup the transmission in Centos server.
This tutorial originally by lollerskates


How to install Transmission with yum on CentOS 5



Install dependencies and some tools we will use:

Code: Select all
yum -y install openssl-devel curl-devel libevent-devel intltool.i386 gettext wget nano



Get and unpack transmission (warning, current version 2.12 is in these filenames)

Code: Select all
wget http://download.transmissionbt.com/files/transmission-2.12.tar.bz2
tar xjvf transmission-2.12.tar.bz2
cd transmission-2.12



Try to build transmission and make after this

Code: Select all
./configure



If u get some errors, do this

Code: Select all
yum -y groupinstall "Development Tools"
./configure



Now make...

Code: Select all
make && make install



already done? not yet..need to create the settings.json

Code: Select all
transmission-daemon



Kill it.. appending -HUP to force dump the settings

Code: Select all
killall -HUP transmission-daemon



Now, u need to adjust your settings,based on what you prefer. then save.
Code: Select all
cd ~
nano .config/transmission-daemon/settings.json

Rerun the transmission-daemon.then FINISH! U can access to your web interface at port 9091

Code: Select all
transmission-daemon

WebEvent Web Calendar by peoplecube.com Non-Persistent XSS

# Exploit Title: WebEvent Web Calendar by peoplecube.com Non-Persistent XSS
# Date: 20 December 2010
# Author: p0pc0rn
# Software Link: http://www.peoplecube.com/
: http://www.peoplecube.com/products-other-web-event.htm



XSS
====
http://site.com/webevent.pl?cmd=[XSS]
http://site.com/webevent.cgi?cmd=[XSS]


Screenshot:



http://img710.imageshack.us/img710/5901/screenshotah.png
http://img694.imageshack.us/img694/5028/screenshotxed.png

Status: Reported.

Thanks

p0pc0rn

CalendarScript is Vulnerable to Cross Site Scripting

# Exploit Title: CalendarScript is Vulnerable to Cross Site Scripting
# Date: 15 December 2010
# Author: p0pc0rn
# Software Link: http://www.calendarscript.com/



XSS
====
http://www.calendarscript.com/demo/calendar_admin.pl
POST : [XSS]
http://www.calendarscript.com/demo/calendar.pl
POST : [XSS]

XSS 2 (for old version i think)
=====
http://site.com/cgi-bin/calendar/calendar.pl?ACTION=VIEWDAY&Year=[XSS]&Month=12&Date=[XSS]&config=calendar.cfg

Screenshot:



http://img580.imageshack.us/img580/9347/calendarss.png
http://img815.imageshack.us/img815/9159/calendar2z.png

Thanks

p0pc0rn

How to Review Java Source Code using 3rd party tool, Lapse!

How to Review Java Source Code using 3rd party tool, Lapse!

Want to share with you all how to use this 3rd party tool with eclipse.
This tool or plugin is really useful if you going to review java source code.

What you need

1 - eclipse-java-helios-SR1-win32, can download from here
2 - Lapse.jar plugin can get it from here here
3 - The source code itself.

What you need to do

1 - put your Lapse.jar to C://your_eclipse_path_directories/plugins


2 - open the eclipse.exe


3 - create a new java project || Go to File > New > Java Project


4 - browse for your source code folder,then click OK from the browse window.

5 - at the New Java Project window, just click Next and Finish.

6 - then go to Window > Show View and choose Other..


7 - find your Lapse folder and choose Vulnerability Sinks ( or others if you want to try the output )
then click OK.


8 - there will be a new Vulnerability Sinks tab and then you can start find the sinks.


9 - after a while, you will get the results. and you can verify them



thanks

p0pc0rn

WorldCat search library vulnerable to Cross Site Scripting

# Exploit Title: WorldCat search library vulnerable to Cross Site Scripting
# Date: 12 December 2010
# Author: p0pc0rn
# Vendor: http://www.worldcat.org/



XSS
====
http://site/search?q=kw:[XSS]

Screenshot
===========

http://img842.imageshack.us/img842/6059/worldcatorg.jpg

Status
======
Reported

Thanks

p0pc0rn