Javascript Injection help...

[guitarist10]

...Okay, I understand that this is totally unrelated to any of the missions. Of course, I'm sure they require injections and such, but I haven't done any of them yet, so just to clear this up, THIS IS NOT ABOUT THE JAVASCRIPT MISSIONS.

What I'm trying to do is have fun with Google and javascript injections. Changing what the "Google Search" and "I'm Feeling Lucky" buttons say, to be exact.

I've figured out that the "Google Search" button is form 0. This lead me to the assumption that the other one is form 1. Either it's not form 1, or I didn't find the right name for it in the source code. From what I've found, the name SHOULD be btnI. Right? If that's correct, then what is the correct form?

[LoGiCaL__]

...Okay, I understand that this is totally unrelated to any of the missions. Of course, I'm sure they require injections and such, but I haven't done any of them yet, so just to clear this up, THIS IS NOT ABOUT THE JAVASCRIPT MISSIONS.

What I'm trying to do is have fun with Google and javascript injections. Changing what the "Google Search" and "I'm Feeling Lucky" buttons say, to be exact.

I've figured out that the "Google Search" button is form 0. This lead me to the assumption that the other one is form 1. Either it's not form 1, or I didn't find the right name for it in the source code. From what I've found, the name SHOULD be btnI. Right? If that's correct, then what is the correct form?

Try using the form id instead of an index.
For instance:

Code: Select all

javascript:alert(document.forms['form id'].btnI.value="test")

I tested it and it worked with the form id. Also, I moved this topic into web design since it doesn't concern any particular mission.

[guitarist10]

Thanks for moving this to the correct forum. I honestly had no clue where to put this.

Anyways, with that information, I have a new question; Where do I find the form ID in the source code? I simply can't find anything along those lines.

[LoGiCaL__]

Thanks for moving this to the correct forum. I honestly had no clue where to put this.

Anyways, with that information, I have a new question; Where do I find the form ID in the source code? I simply can't find anything along those lines.

While you have the source page open, press ctrl + f to open the find function and search for the form tag. If you aren't sure which one is the id, then google the form tag.

[guitarist10]

So, for some reason, I used this code...

Code: Select all

javascript:void(document.forms[0].btnI.value="test")

...and without changing the number in the brackets, just changing the name, I got it. Is there anyone who can explain this to me? I feel like it should be a different number, but it's not. It's confusing me. :p

[LoGiCaL__]

There's only one pair of <form></form> tags with a couple inputs within the form tags. So when you referenced the first button it's still within the same form tag as the second button. Hence a different name for the the two inputs. Basically, <form></form> tags can have multiple inputs. Just because there are two buttons doesn't mean it has two forms.

Just out of curiosity, what made you think there were two forms if you didn't check for the tags before you tested for the second button?

[guitarist10]

I'm literally JUST learning this sort of thing, so I'm a little stupid with HTML code 'n such. That's why. Thanks for explaining it to me, though!

[LoGiCaL__]

I'm literally JUST learning this sort of thing, so I'm a little stupid with HTML code 'n such. That's why. Thanks for explaining it to me, though!

Ah, don't be like that man. I honestly just thought you knew something I was missing. A good portion of the code is obfuscated or at least it is to me. Stick around, and at least now you have a good starting point.

[guitarist10]

I plan on sticking around on this site. I'm having a lot of fun learning this stuff and the hacking missions are VERY fun. Not to mention challenging.

[mShred]

I plan on sticking around on this site. I'm having a lot of fun learning this stuff and the hacking missions are VERY fun. Not to mention challenging.

This is something I like to hear.