3dw4rd5n0wd3n quoidautre

XSS-game by Google

Welcome, recruit! Cross-site scripting (XSS) bugs are one of the most common and dangerous types of vulnerabilities in Web applications. These nasty buggers can allow your enemies to steal or modify user data in your apps and you must learn to dispatch them, pronto!

At Google, we know very well how important these bugs are. In fact, Google is so serious about finding and fixing XSS issues that we are paying mercenaries up to $7,500 for dangerous XSS bugs discovered in our most sensitive products.

In this training program, you will learn to find and exploit XSS bugs. You'll use this knowledge to confuse and infuriate your adversaries by preventing such bugs from happening in your applications.

There will be cake at the end of the test.

	from BeautifulSoup import BeautifulSoup as BS
	import urllib, urllib2, re
	import csv

	url = 'http://www.entreprises-aix.com/entreprises.php'
	data = {"CaNum": "3246", "btn_rechercher": "RECHERCHER"}
	data = urllib.urlencode(data)

	req = urllib2.Request(url, data)
	response = urllib2.urlopen(req)

	# Copy a whole site locally,
	# including images, css, js
	# and converting links
	wget -p -m -k fullweb.io

	# Check for 404 links
	wget --spider your-url-list.txt
	# give it an HTML page with -F
	wget --spider -F you-webpage.html

	<snippet>
	<content><![CDATA[
	\$curl = curl_init();
	\$curlOptions = array(
	CURLOPT_URL => ${1:url},
	CURLOPT_POST => ${2:post},
	CURLOPT_POSTFIELDS => ${3:fields},
	CURLOPT_RETURNTRANSFER => ${4:return},
	CURLOPT_SSL_VERIFYPEER => false,
	CURLOPT_SSL_VERIFYHOST => false,

	var AppRouter = Backbone.Router.extend({
	routes: { "appointments/:id": "show", "": "index" },

	initialize: function(options){
	this.appointmentList = options.appointmentList;
	},

	index: function(){
	var appointmentsView = new AppointmentListView({collection: this.appointmentList});
	appointmentsView.render();

	if ($("#flottaison1").length > 0) {
	$("#flottaison1,#flottaison2,#flottaison3,flottaison4").remove();
	$("#text-flottaison1,#text-flottaison2,#text-flottaison3,#text-flottaison4").remove();
	} else {

	$('body')
	.append('<hr id="flottaison1"/>')
	.append('<span id="text-flottaison1">1024x768 (560px)</span>')
	.find('#flottaison1')
	.css({

	<h1>Stairway Nav</h1>

	<div>
	<h2>One Step</h2>
	<nav id="example-one">
	<a href="#">Navigation</a>
	<a href="#">Navigation</a>
	<a href="#">Navigation</a>
	<a href="#">Navigation</a>
	<a href="#">Navigation</a>

	BEGIN
	SET @mySelect:= 'SELECT * FROM CATEGORY ';

	IF(param_id_category > 0) THEN
	SET @mySelect:= CONCAT(@mySelect, 'WHERE CAT_ID=',param_id_category);
	END IF;

	prepare stmnt FROM @mySelect;
	EXECUTE stmnt;
	DEALLOCATE PREPARE stmnt;

	mkdir ~/Sites/repo_tmp
	cd ~/Sites/repo_tmp
	git-svn init https://svn.example.com/repo/trunk/ --no-metadata
	git config svn.authorsfile ~/Sites/git-users.txt
	git-svn fetch
	git-svn show-ignore > .gitignore
	git add .gitignore
	git commit -m "Convert svn ignored files to .gitignore"
	cd ~/Sites
	git clone repo_tmp repo

	mysql_check -u [user] -p[password] --repair --all-databases (ou "mysqlcheck")

	mysql_upgrade -u [user] -p[password] --all-databases