This is due to code in the HTML telling your browser to not display the text on screen. So how do we change this? Like so:
By
going into developer options (Right click>Inspect Element) while
hovering over the password box, we’ll get some HTML Code that looks like
this
- <input class="text-input" type="password">
Now
there could be a whole lot of other stuff in the input tags, but the
thing we’re focusing on is the “type” object. By going in and changing
the type from “password” to “text” . It will display the password
clearly, like so:
(No this isn't my twitter password)
This
hack can be used on computers where people have their browser to auto
complete the password, the password will be in dots, not text, but
changing the HTML code quickly, can result in you gaining the text
password, which they very well may use on other stuff.
2. HTML Injections In Forms
Now, while this doesn’t apply for most sites with basic security, its worth trying.
So
as you may know, HTML is what makes up the basic viewing of a site. So
when you’re on a site where you can post things like a blog, try putting
HTML tags around your post, so instead of posting:
“This is my blog!”
Try posting
“<font color=”red”><h1>This is my blog!</h1></font>”
If
it was successful, it would post the text in gigantic red text, this
can be used to mess with a site in more sinister ways if you try adding
<?php ?> tags to the form to get server side information.
I actually cant think of any more right now..Hm.
In any case, stay out of trouble!
Thank You
Comments
Post a Comment