So recently, thanks to some help from Father, I have gained admin panel access to a WoW/Rs/SWTOR/Fifa16/GW/ArchAge/Aion goldseller. By adding a js <script> tag in the HTML to the footer, I have essentially performed a simple XSS without full cpanel access. What this means is that anything a JS-based script can do, I can do. That includes redirects, keylogging, etc.
Right now it's redirecting to a crappy phishing page. I am auctioning this redirect / keylogger / whatever JS script you want to be running to the highest bidder. Do some research on malicious javascript if you're not quite sure of exactly how much javascript is capable of doing.
If it's a redirect, all I will need is the URL you want to send it to, otherwise, you'll need to provide the script you want to have run. You can be hosting it, or I can host it on a secondary server.
Bidding starts at $20 PayPal / 20m 07. I will not accept any other forms of payment and I will not go first unless I personally know you or personally trust you.
Right now it's redirecting to a crappy phishing page. I am auctioning this redirect / keylogger / whatever JS script you want to be running to the highest bidder. Do some research on malicious javascript if you're not quite sure of exactly how much javascript is capable of doing.
If it's a redirect, all I will need is the URL you want to send it to, otherwise, you'll need to provide the script you want to have run. You can be hosting it, or I can host it on a secondary server.
Bidding starts at $20 PayPal / 20m 07. I will not accept any other forms of payment and I will not go first unless I personally know you or personally trust you.