Quote from: Bit_Happy on June 21, 2011, 05:33:18 AM

Quote from: jrmithdobbs on June 21, 2011, 04:35:20 AM

....
http://www.mediafire.com/?synt5sjcbkl9zvq (XSS + CSRF)

IMO, Anyone starting a post like this needs to be able to demonstrate exactly where the attack part of this code is:

Code:

If you can show me (us) the "bad parts" and be correct, then thank you for posting this.
If you can't then (at best) you are acting without thinking things through.
Thank you

The above code has a simple html form and uses the MtGox merchant API.

Your thread title says [Full Disclosure] and you are failing to provide answers to simple questions. Welcome to the forum, but why should we trust you on an important issue?

+ Your excuse is total BS.
White-hat hackers share exploit code to learn how to defend themselves.
Please, either prove your accusations, or admit you should Not have made the accusative post.

Edit: Some (or all) may be true.
You offered [Full Disclosure], so let's have it. Cheesy