| Tool name : | Unanonymity 0.3 |
| Description : | Unanonymity is a PHP script that collects all user data on the web server side and also on the web client side to show what kind of information the server owner can see from the user if they want. In this release the LAN host scanner feature was implemented. |
| Tested on : | Firefox 3.0.7 on Windows XP |
| Feedback : | In case you encounter any problems with the tool, you have suggestions to improve it, or you tested it with a Windows version i’ve not yet tested please drop me an email. |
| Downloads : | Binary | Source |
| Online example : | Example |
Unanonymity 0.3 : PHP script to reveal user data
Aug 10th, 2009 by carrumba
2 responses to “Unanonymity 0.3 : PHP script to reveal user data”
Leave a comment
But please respect the commenting rules. Critizism is appreciated and also general comments of course. If you're rude your comment will be deleted. Also use your personal/nick name but avoid using business names. Thanks!
You fail to escape user input and echo all the servers variables genereted from the clients request.
So your demo page and this script is open for various attacks. for example Xss, open redirect, etc.
regards
it’s a dead end script. data won’t be processed any further and the script doesn’t pose a threat.
but generally spoken, yes. you are right.