CrazyDavinci’s Blog | Social Networking - Programming - Networking - Security

Here’s another more friendster widget, that can serve as a vessel to inject your Cross-site Scripting (XSS) vector in your profile. Just follow the instructions carefully.

Install the widget in your profile:
Click Here

You will be forced to log in to your Friendster account if you’re not currently logged in.

Insert your XSS vector in your profile:
After adding the application, you will then be redirected to your profile page. If the notification box saying the app was successfully added to your profile appears, it means the widget is now active. If that is the case, click the Edit Profile button in your control panel.

Insert the complete link of your file in the part of the code below where it is required.

A. If your file is [wikipop]Cascading Stylesheets[/wikipop] (CSS), use the code below and paste anywhere in your About Me or Who I Want to Meet sections.

B. If your file is a [wikipop]JavaScript[/wikipop] (JS), use the code below instead and paste anywhere in your About Me or Who I Want to Meet sections.

Check your codes:
After hitting the save button on your edit profile page, go to your profile to see if your codes worked. If yes, don’t touch your application again. If it didn’t work, check your codes for errors. If you are sure your codes are ok, just ask for help by posting a comment.

Message from Friendster 101 for Dummies:
If you are going to post any of our contents on other sites, kindly notify us and tell us where you posted our contents, so in case you need help explaining, we could visit the site and help you out.
Source: http://blogs.angelldeville.com/2009/08/latest-xss-widget

12 Responses to “Latest XSS Widget”

1. 1
   Reza Says:
   August 4th, 2009 at 2:45 PM

   Hello Sir, Thanks alot for the latest widgets, by the way, how to be a CONTRIBUTOR that you said on the “Friendster XSS widgets” ?? i want to see the content, but i have to be a contributor, it means the same as PROMOTOR? i’m confused, Thanks anyway

2. 2
   jhess Says:
   August 4th, 2009 at 7:32 PM

   hey !! tnxx for the new widget !! it realy help me A LOT !!!! thank you thank you !!!

3. 3
   Hypercool Says:
   August 4th, 2009 at 9:54 PM

   Add app at the:=>

   http://fly2.ws/app

   Don’t work on my Profile….

   Why

   http://www.friendster.com/greensystem

4. 4
   selvand Says:
   August 5th, 2009 at 12:57 AM

   is this work ??????

5. 5
   anontmous Says:
   August 5th, 2009 at 4:17 AM

   how do you add this app???

6. 6
   Joy Says:
   August 5th, 2009 at 5:34 AM

   bad news guys
   the app has just been deleted
   kindly proceed here for update :
   http://blogs.angelldeville.com/2009/07/latest-xss-widget/

7. 7
   selvand Says:
   August 7th, 2009 at 9:54 PM

   try this one
   http://widgets.friendster.com/daygrader?src=http://blogs.angelldeville.com/2009/08/latest-xss-widget

8. 8
   hempa- Says:
   August 9th, 2009 at 5:55 PM

   has same situation of JEZA

9. 9
   Pintuz Says:
   August 14th, 2009 at 1:57 AM

   huhuhuhu…. is not work for anymore..
   plzz help..

   everyone

10. 10
    Pintuz Says:
    August 14th, 2009 at 1:58 AM

    have another way evetyone ??

11. 11
    sandra king Says:
    August 14th, 2009 at 1:13 PM

    application not found…thats what it says…whats the problem???

12. 12
    makinig Says:
    August 18th, 2009 at 5:09 PM

    pa nu register?