PDA

View Full Version : hax



Terrick
09-27-2005, 12:01 AM
tell me how this works

http://cgi.ebay.co.uk/AMAZING-ESP-MIND-READING-PSYCHIC-MIND-MAGIC-TRICK_W0QQitemZ5619192992QQcategoryZ1523QQssPageNa meZWDVWQQrdZ1QQcmdZViewItem

DJ Detroit Butcher
09-27-2005, 04:07 AM
yeah no shit, how does this work? i'm sure there's some explanation, something be exploited in a clever way, what's up????

Harmeister
09-27-2005, 06:56 AM
each of those pictures has a mouseover that rewrites the html down lower in the page. It rewrites the "innerHTML" with some characters that are not visible (they are "shy") on a normal page encoding. They are only visible when you copy/paste in Notepad (Word and WordPad will not display them either sometimes). That's why the text looks the same when you see it in the browser, but not when you paste. The text is also highly escaped in the HTML (and hence the characters are escaped so you can't see them, so you have to unescape everything :) ) The particular character sequence is %26shy%3B so in the text below, where you see the asterisks is "hidden", or "shy" and is what makes it change when you copy paste.

onmouseover="pob.innerHTML='********STAR********WAVESSQUARECIRC LECROSS"

In other words, yes, a highly evolved HTML trick. Not worth 3 pounds. Kinda nifty though