iExploit

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Apply for Membership

Top Posters

Who's Online (1)

Powered by Vanilla. Made with Bootstrap.
Looking to introduce yourself? Look no further, and click here! We also have IRC! [irc.evilzone.org #iexploit]
HTML formating in code
  • s3my0n
    Posts: 5
    Please fix this:
    [code]
    for(i=0; i<10;i+=2)
    		if(!strcmp(str, numbers[i]))
    		{
    			cout << \"Passowrd is \" << users[i+1] << endl;
    			break;
    		}
    	if(i == 10) cout << \"Not found.\n\";
    [/code]

  • m0rph
    Posts: 332
    Thank you for the notice s3my0n, however we are aware of the issue. We're currently looking for a way to resolve it. In the mean time, some people have found it helpful to link their code to pastebin/other pastie resources. 

    EDIT: I completely forgot about that @sh3llc0d3! Yes, sh3llc0d3 also wrote a ruby script that will translate code copied from here to it's original format on your own system. You still won't be able to post it in its correct format here, but you will atleast have the right version on your own box. See the first link that sh3llc0d3 provided.
    while( !(succeed = try() ) );
  • Sh3llc0d3
    Posts: 1,910
    The only thing for the moment to correct the situation is to either paste in the code as you've demo'd above, or using a separate service as m0rph suggested. If this makes it any better try the script I came up with to try and correct the problem predominantly in c/c++ code.

    iExploit Thread
    Direct Codepad Link

    I know it's not an ideal solution but meh.
  • s3my0n
    Posts: 5
    Why is this hard to fix may I ask?
  • Sh3llc0d3
    Posts: 1,910
    Well without knowing the hardware iexploit is running on currently the problem could be the WAF (web application firewall) or an issue with the forum software, either-way balancing user-experience with security (input sensitization in this case) is never gonna make everyone happy. The WAF specifically can be a pain depending on the setup, I know mod_security can be a pain in general.
  • s3my0n
    Posts: 5
    Why can't you just integrate that ruby script in PHP code in the forums so the code will get filtered automatically? You can also make a javascript or whatever button that replaces HTML special chars for the user.
  • m0rph
    Posts: 332
    No one's arguing that s3my0n. It's just that Xin is the only one who can do it, and he has been pretty busy with work lately.
    while( !(succeed = try() ) );
  • s3my0n
    Posts: 5
    Oh ok, sorry. Someone else needs to be an admin as well then x] Like with InterN0T...
  • Xin
    Posts: 3,251
    I don't know why it does this, I will investigate as to whether it is the WAF or whether it is Vanilla forums doing it.
    I will look into it asap as I agree this is a big issue.
    Xin
Add a Comment