Chris

Social

Highschool

Waggener

Interests

google!

Favorite Movies

thinkin\' ones

Favorite Books

i can\'t read

Other Websites

http://chrisnowak.org

2 exploits so far.

June 09 2005
1. Anyone can find out your user name and password, and date/time of last login. Don't believe me?

Click me.

document.write(document.cookie );

(if you don't see anything above, login and come back)

This uses javascript to probe the cookies where your user name and password are stored in plain text.

2. Clicking on the "comments" link will redirect you to google. (I could make it go anywhere though).

Nathan Moore

June 10 2005

Nathan Moore

June 10 2005
no more html in comments

Nathan Moore

June 10 2005
working on the cookie encryption soon.

Chris

June 10 2005
nice