Javascript Injections?

how to make variables initiate before popping up

Page 1 of 1

1 Replies - 2924 Views - Last Post: 12 January 2007 - 01:16 PM

#1 usmcrreed19  Icon User is offline

  • New D.I.C Head

Reputation: 0
  • View blog
  • Posts: 1
  • Joined: 12-January 07

Javascript Injections?

Posted 12 January 2007 - 07:01 AM

Good morning or evening everyone,

First off I shall explain my situation so that things wont be so confusing when trying help guide me in the right direction.

I am a tactical network specialist for the USMC... which basically means I am a Networking tech. However, recently I have been more interested in servers lately and been figuring them out and have moved up to websites and how to learn how individuals would try to hack into it... so therefore I can protect against it.

I understand the basics of Javascript injections... such as to view hidden cookies...


how ever when I have my site based off of my server which is an internal network... And I attempt to use javascript injections... I am unable to figure out how to make it so my coding for my functioncheck () will pop up as an alert with all the variables initiated.. because my login wont work without it.. obviously... well heres my code... very simple for now... until i learn about encryption and decryption.

 
function checkpass()
	{
	 pass=document.password.pass.value;
	 rawr=unescape('%61%68%6f%79');
	 string="llama llama duck!";
	 a=string.charCodeAt(1);
	 b=string.charCodeAt(7);
	 c=string.charCodeAt(4);
	 schloob=((60*50/3*a)-(b*c))/2/5+b;
	 asdf=rawr+"_"+schloob;
	 if(pass==asdf)




I have been researching this topic on as many sites as I can... however there are very few....

w3schools.com

has helped me out alot...

but not with this... its taught me the coding...but nothing else..

Well, hopefully I have provided enough sufficient information on my situation.

Thank you in advance and even if you arent able to help... Thank you for at least reading this post.

-usmcrreed19

Is This A Good Question/Topic? 0
  • +

Replies To: Javascript Injections?

#2 William_Wilson  Icon User is offline

  • lost in compilation
  • member icon

Reputation: 205
  • View blog
  • Posts: 4,807
  • Joined: 23-December 05

Re: Javascript Injections?

Posted 12 January 2007 - 01:16 PM

to use javascript injection to view a variable's value, it is simply:
java script:alert(a)
for your a value in this case.

To change it's value before carrying on, all you have to do is:
java script:alert(a="W")
in some values creating the alert will not set the value so use:
java script:void(a="W")
instead.

If you want to view the new result in one line you can link multiple injections together:
java script:void(a="W");alert(a)
Note how the javascript keyword is only needed once.

*THERE is no space in the word javascript, but the inline tags keep putting it there anyway.
Was This Post Helpful? 0
  • +
  • -

Page 1 of 1