Based on Google Dorks Search keyword, Outta 100000 Websites  are vulnerable to this exploit and users can bypass PayPal payment button and finally get the download link  without have to pay. Most affected are type of Website Resell right and Private Level Right (PLR) websites who offer to sell ebooks, website scripts and resell software. All of these websites mostly are type of  automatic money making website which the administrator itself didn’t validate or check whether payment have been made in their paypal account before they give their visitor/customer the download link and download the item. So, visitor/customer can download their selling item like  ebooks,  software etc for free only by using a single line javascript exploit which is:

javascript:top.location=document.getElementsByName('return')[0].value; javascript:void(0);

But first, we still need a dork to make life easier searching the vulnerable websites to later exploit the page to bypass paypal payment and get free download.

Enuff said here is the dork:

"this order button requires a javascript enabled browser"

Noted: Paste the dork inside google search with the Quote Sign included”"

Now Click any of the results which the title offering to buy things and also have this dork  in the description.

“this order button requires a javascript enabled browser”

Next after open the vulnerable website, make sure it has paypal payment button or you just give it try. Paste the Exploit javascript code into the address bar at the same page where the vulnerable site was open. After paste the code, do not hesitate to click ‘Go” button. If the website is vulnerable, the page will directing to Link Download Page. Saying Thank You for your buying and Paying eventhough you’re not .

Have fun trying, i got many ebooks from PLR and resell Right website mostly regarding SEO, and also fanbook fanpage tempalte, website script. Some of this book are worth to have and some not. And lucky you guys know this information and if you want it, you have the choice to pay or download it for free

移动设备快速阅读本文：
请扫描二维码  -->

Incoming search terms:

• Sheet1Page 1javascript:top location=document getElementsByName(\return\)[0] value; javascript:void(0); (137)
• this order button requires a javascript enabled browser (59)
• 1javascript:top location=document getElementsByName(\return\)[0] value; javascript:void(0); (25)
• Sheet1Page 1javascript:top location=document getElementsByName(return)[0] value; javascript:void(0); (25)
• Sheet1Page 1javascript:top location=document getElementsByName(\return\)[0] value; javascript:void(0) (24)
• google dork paypal (4)
• google dorks for paypal (2)
• top location exploit (1)
• paypal dorks (1)
• google dork to find paypal (1)

Schlagworte: automatic money making website vulnerable, bypass paypall payment, bypass-paypal-payment, ebook-google-adsense-indonesia, explot javascript code, Hacking, hot-to-bypass-paypal-payment, how-to-bypass-paypal-payment-for, Javascript, javascript-enabled-browser-ebook-paypal, javascript-paypal-exploit, kumpulan-rapidleech-agustus-2011, payment-bypass, paypal payment vulnerable, paypal-exploit-download-books, this-order-button-requires-a-javascript-enabled-browser-domain-filetypepdf, this-order-requires-javascript-enabled-browser-domain-name, vulnerable website, website reseller paypal exploit, website-bypass-paypal-payment,

This entry was posted on Wednesday, August 3rd, 2011 at 8:34 am and is filed under Geeks, Hacking, Javascript. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.