Hacking in to Rapidshare

October 19th, 2007 · Comments

After a long i decided to blog… i regularly download stuff from RS but the bad thing about it is that it allow limited downloading with free account and the evil thing about it is that you cant download concurrently and have to wait for long if you have recently downloaded stuff. i managed to get a RS premium account from one of my friend aka b3ast he’s from PCIA some hacking related team. I logged in as a premium user and it allowed me to download stuff but i got curious to get more RS accounts in the mean while i visited xssed and found there are couple of xss vulnerabilities that exist in Rapid share and they didn’t even bothered to fix them now the next thing to do is to search through what can we do with the xss while i was logged in with the premium account in firefox i did alert(”+document.cookie); guess what it showed me a cookie with my premium credentials.. “cool” for a guy a like me and Very bad for the guy who actually paid for the RS Premium account Now what next i have to make that xss to get me some RS premium accounts.