javascript - What is the easiest way to inject a script in to someone else's domain? -

-

for example if i'm on www.facebook.com , want inject script analyze dom? 1 way open console , use like

document.createelement('script');

and set src attribute, etc.

is best way it?

if trying inspect someone's dom, it's easiest use js console or debugger (if browser offers natively or add-on firebug).

you use proxy server, burp or zap, intercept responses website , inject own javascript.

you duplicate site web crawler. should permission first, ensure don't violate terms of service, , make sure have lots of space. can play site heart's content :)

as alternative, use engine xssshell, loading website want examine in xssshell compromised web browser, loading code want load xssshell.

or, set own dns server specifies local ip address foo.facebook.com, else facebook.com. depending upon how fb manages site (new http headers, cookie paths) may able run javascript local server, while browsing fb.

if really, want write code executes in context of real website in question, not copy, , don't care violating laws, you'll need find cross site scripting vulnerability. that'd let load own javascript target server's execution environment. don't recommend 1 - @ least, not if don't legally own target environment :)


Comments

Post a Comment

Popular posts from this blog

Detect support for Shoutcast ICY MP3 without navigator.userAgent in Firefox? -

-
the current version of mozilla firefox 23.0.1, version not support play mp3 shoutcast streams tcp port different 80 (most common 8000 shoutcast 1.9.8). i use flash when mp3 support not available in html5 audio, way detect is: try{ var = document.createelement('audio'); r = !!(a.canplaytype && !!a.canplaytype("audio/mpeg; codecs=mp3").replace(/^no$/,'')) }catch(e){ r = false; } the support mp3 shoutcast streams in firefox added in version 24 . a.canplaytype("audio/mpeg; codecs=mp3") = in chrome , firefox, chrome support, firefox not support, due current code detect not work firefox. the current version of jquery support ie 6 1.10.2, version not has .browser i think "stylized" way testing features , not querying browsers / versions, notwithstanding here see hard not violate "principle". what "stylized" way of detect mp3 icy support without navigator.useragent in firefox? ther...
Read more

web - SVG not rendering properly in Firefox -

-
i have problem svg renderring in firefox. whilst works in safari, chrome or in ie, doesn't work in firefox. inspecting element seems layers there, background visible if it's z-index higher z-index of others. rendered in firefox: svg logo in firefox link original source file: svg file thanks help. ps: used sketch 3 export svg. if helps somehow. you're experiencing bug 995813 . i fixed bug time ago change still making way through release process example display correctly firefox 31 onwards released on 22 july 2014. in meantime if move fill="white" <mask> element child <use> element work around firefox bug.
Read more

java - JavaFX 2 slider labelFormatter not being used -

-
i have following code not label slider "foo50", etc... 1 expect setlabelformatter call, instead seems have no effect (the slider labelled 50, 100, etc , println's dont run). there missing? not implemented in default 2.2 skin? using oracle java 7 package javafxbugtest; import javafx.application.application; import javafx.scene.*; import javafx.scene.control.*; import javafx.stage.*; import javafx.util.stringconverter; public class javafxbugtest extends application { @override public void start(final stage primarystage) { slider cp = new slider(); cp.setlabelformatter(new stringconverter<double>() { @override public string tostring(double t) { system.out.println("nope?"); return "foo" + t.tostring(); } @override public double fromstring(string string) { system.out.println("he...
Read more