Page 1 of 1

SSL for the forum

PostPosted: Sat Aug 18, 2018 6:52 pm
by eltong
Ever considered using SSL for the forum? Let's encrypt is pretty solid and free.

Re: SSL for the forum

PostPosted: Sat Aug 18, 2018 7:13 pm
by morpheus
I'll look into it - but honestly, there's nothing secret here. Using SSL would just make certain types even more eager to hack in here.


(And I see everything , people. Try harder)

Re: SSL for the forum

PostPosted: Mon Aug 20, 2018 11:05 pm
by darkknight
morpheus wrote:I'll look into it - but honestly, there's nothing secret here. Using SSL would just make certain types even more eager to hack in here.


(And I see everything , people. Try harder)


The messages are awesome :D :D :D :D

download/file.php?mode=view&id=192

Re: SSL for the forum

PostPosted: Tue Aug 21, 2018 6:09 pm
by morpheus
I do see everything.

71.212.??.?? - - [20/Aug/2018:19:02:25 -0400] "GET /xxr/index.jl?q=xnu&ver=xnu-4570.41.2%3Cscript%3Ealert(/I%20am%20the%20l33t%20h4x0r/)%3C/script%3E&case=false HTTP/1.1" 200 2798 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:60.0) Gecko/20100101 Firefox/60.0"


XSS won't get you anywhere where there are nothing but forum session cookies, so I let that one fly :-)

Re: SSL for the forum

PostPosted: Wed Aug 22, 2018 1:37 am
by darkknight
morpheus wrote:I do see everything.

71.212.??.?? - - [20/Aug/2018:19:02:25 -0400] "GET /xxr/index.jl?q=xnu&ver=xnu-4570.41.2%3Cscript%3Ealert(/I%20am%20the%20l33t%20h4x0r/)%3C/script%3E&case=false HTTP/1.1" 200 2798 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:60.0) Gecko/20100101 Firefox/60.0"


XSS won't get you anywhere where there are nothing but forum session cookies, so I let that one fly :-)


:D :D :D :D

Those messages get me every time :)