Damn Friendster!

It seems that Friendster had updated their filtration system again, but this time, with tight upgrades. I can’t even execute a single XSS test or a simple javascript alert box and that really pisses me off!

Previously, these methods could be performed in Friendster :

Currently, I’m the process of implementing some PHP codes into a Friendster profile which would then redirect the profile to another site, thus executing the codes. But, Friendster is so brilliant that it would filter whatever link that ends with blahblah.php, and making the corresponding codes invisible when viewing the source. So, I managed to implement the PHP codes into a JPG file, then letting the directory of the JPG file to recognise the JPG file as a PHP file using the MIME-Type and .htaccess, and finally, implementing the JPG file into a Friendster profile as a ‘normal image’.

I’ve tried this method before and it worked! But, now, it doesn’t seemed to be promising. It looks like I got to perform some tweaks on this method in order for it to be successfully executed in Friendster!