Friendster Tweaking (15)
General (2)
Lifestyle (1)
Miscellaneous Trick (5)
Programming (6)
Security (1)
Web Development (6)
Recently the great, seo-friendly theme, thesis, has upgraded their version to 1.8. You’re absolutely going to love the new features in Thesis 1.8. It’s just plain easier, smarter, more powerful, and accessible!
Thesis 1.8 not only incorporates WordPress nonce field protection, but it also boasts a refined data-handling system that will help keep your sites both safe and stable!
Status : ActiveMyFeeling Widget Linker
The last shoutout linker has been filtered already about a month after being released. Now i’m trying to share again another persistent xss on friendster that can be used to add layouts to our profile. Here, we’re gonna use the old FBML platform on friendster applications. as you might already know, actually this platform was already removed from their developer page about a year ago, but some of the old ones are still intact.
OK, let’s just go straight to the steps. Follow these instructions carefully :
Read more…
PHPMailer is a PHP email transport class featuring file attachments, SMTP servers, CCs, BCCs, HTML messages, word wrap, and more. we can use it for sending email via sendmail, PHP mail(), QMail, or with SMTP. You can read more about it on their official website here…. With this class, i tried to make another simple wp plugin called WP PHPMailer contact form. This plugin will create a simple contact form for your wordpress powered blog. captcha code is also added to the form to prevent spamming.
Searching for XSS hole on social networking websites is really fun indeed. It feels like you have your own satisfaction whenever you find it by yourself. the XSS vulnerability on Tagged, Multiply, Friendster or even Facebook have been posted here before and some has not been patched.. lolz..
About a month a go, when i was too busy with my daily activites on the real life, i didnt realize that one of our mods on Forum Balikita named H4×0r-x0x found one again on twitter, i’m amazed, good job dude. If i’m not mistaken the vulnerability left on twitter oauth application module, especially on application name
Media-BoxChat-Box
