Any information on Myspace?

[tigerblade18]

I'm interested in finding out information on myspace vulnerabilities at this time, as myspace has stepped up with their security and patches.

I can't seem to find any public information that is current.

Anyone willing to share message me.

[Moonbat]

Information on MySpace vulns usually don't go public until they are already patched. And even so, they will be found and patched in a few hours.

You won't find any current vulns using Google.

[Troll]

I'm interested in finding out information on myspace vulnerabilities at this time, as myspace has stepped up with their security and patches.

I can't seem to find any public information that is current.

Anyone willing to share message me.

Myspace is pretty secure, finding any vulnerabilities will be tough..

It's better to exploit something which is outside myspace's control, (for example the quicktime vulnerability (although that also used a XSS flaw in myspace to work))..

If you want to use google, look at examples of previous exploits on myspace and see if they can be used on other sites like blogger, facebook, xanga.. etc.

[tigerblade18]

Thanks.

Yeah, most of what I have found has already been patched.
Except one very interesting feature...so I've been exploring that a bit more.

But one thing I don't understand is once you gain access to something, why it won't let you gain further access?!

And those darn Mytokens are a bit troublesome.

I'll look into searching other social networking sites.

Thanks for the tips :)

[Moonbat]

Try Piczo, that site has dozens of vulns (last time I checked).