Tweet
If you watch vloggers on YouTube you may have noticed some where getting "hacked." I was inspired to investigate, and found the problem. Haven't seen this published yet, but it's so simple it's disturbing.
It works a lot like the youtube API, and I found it by looking at the javascript function(removevideo(video_id).)
All you'd have to do is get the video ID's of all the users video, and create a loop in some client side scripting.
I'll only give whole URL's to keep from breaking any forum rules, but YouTube basically has dozens of XSS vulnerabilitys.
I hope I don't offend anyone by posting this, but I figured some of you probably use the service, and would like to know how people are getting there video's deleted. A javascript FOR loop, and a IFRAME could literally wipe an account.
YouTube basically told me I was an idiot even though I tested it.
It works a lot like the youtube API, and I found it by looking at the javascript function(removevideo(video_id).)
All you'd have to do is get the video ID's of all the users video, and create a loop in some client side scripting.
I'll only give whole URL's to keep from breaking any forum rules, but YouTube basically has dozens of XSS vulnerabilitys.
I hope I don't offend anyone by posting this, but I figured some of you probably use the service, and would like to know how people are getting there video's deleted. A javascript FOR loop, and a IFRAME could literally wipe an account.
YouTube basically told me I was an idiot even though I tested it.
Code:
('http://youtube.com//my_videos?action_removevideo=1&video_id=' + video_id'
http://www.youtube.com/watch?v=GtQAA8KijgA
http://www.youtube.com/watch?v=9kB2K8QigEo
http://www.youtube.com/watch?v=_YpqG9kggKg
http://www.youtube.com/watch?v=O1av759BjTQ
http://www.youtube.com/watch?v=ZGNYzdCWqTY
http://www.youtube.com/watch?v=53vD5qHY5BU
http://www.youtube.com/watch?v=etJXrbUo-wo
http://www.youtube.com/watch?v=jcL5ag-Dh3M
http://www.youtube.com/watch?v=RDc6dNer--g
http://www.youtube.com/watch?v=rY51VogMOiE
http://www.youtube.com/watch?v=6YyasAj0J1s
http://www.youtube.com/watch?v=9i7oEfVi2ZY
http://www.youtube.com/watch?v=rxbq22ybWhU
http://www.youtube.com/watch?v=rxbq22ybWhU
http://www.youtube.com/watch?v=KJwQzeL-ua4
http://www.youtube.com/watch?v=-7H9u_n331Y
http://www.youtube.com/watch?v=pXE79tf39A4
http://www.youtube.com/watch?v=fIK7Gdg7YNQ
http://www.youtube.com/watch?v=7u6UaIPfLC0
http://www.youtube.com/watch?v=E60MdnW1eNo
http://www.youtube.com/watch?v=ziUawb0WSVg
http://www.youtube.com/watch?v=Ob1e4lVc8jA
http://www.youtube.com/watch?v=a-1EEbLwVd4
http://www.youtube.com/watch?v=S9qKV7kTtvg
Comment