Javascript Injection Javascript injection is when you inject a short javscript temporarly into a webpage. It is only temporary so don't worry about getting caught or any of that nonsense. Javascript injection is entered in the address bar throught the javascript protocol. the javascript protocol is Javascript:code. Here are some examples of common javascript injections. ***Example*** Javascript:alert(document.cookie) This script will make a popup box come up with the contents of the cookie that is saved on that site. If a boc comes up with no contents at all then a cookie is not saved to the site. Javascript:alert(document.forms[0].to.name) This script will show the name of the first form on the page. Remember that the first form on the page is form "0" not form "1." ************* Javascript injection can also be used to change the contents of the html, as follows... ***Example*** Javascript:void(document.cookie="value = string") Replace value with the name of the string you want to alter and string with the result you want to change. Javascript:void(document.forms[0].to.name="hello") This simple script will change the name of the first form on the page to hello. ************* You can also have more than one script on the same line to check to see if your script turned out right. ***Example*** Javascript:void(forms[1].to.name="hello"); alert(forms[0].to.value) This will check to make sure that your first script worked right. ************* ***Note*** A good example on how to use this in on http://www.hackthissite.org in the basic missions. I think it's four or five missions into the basic missions so you will have to complete the ones before it also. ********** ****************************************************************************** *****************gopher://sdf.lonestar.org/11/users/bkjkhker****************** ******************************Copyright(c) 2007******************************* This was made for educational purposes only and I (Jeremy Overman) am not responsable for anything you do with this information. This document may be published elsewhere or be printed as long as it is not altered and full credit is given to me. BkJkHker@sdf.lonestar.org ******************************************************************************