Click here to Skip to main content
15,890,527 members
Please Sign up or sign in to vote.
0.00/5 (No votes)
Hi Friends,

This is the View Source Code , which i took from my running page.

as per the below code we can see the page name,method name and even the column names also. My doubt is , is there any way to hack the sever using the below info.


XML
<!DOCTYPE html>

<html xmlns="http://www.w3.org/1999/xhtml">
<head><title>

</title>
    <script src="../Scripts/jquery-2.0.2.js"></script>
    <script type="text/javascript">

        $(document).ready(function () {
            debugger;
            getCountryList();
            // $('#ddlCountry').html();

        });

        function getCountryList() {
            $.ajax({

                url: "DDLFillWithJSON.aspx/GetCountryList",
                type: "GET",
                contentType: "application/json; charset=utf-8",
                dataType: "json",
                success: onSuccess,
                error: geterror,
                failure: function (response) { alert(response.d); },
                async : false

            });
        }


        function onSuccess(response) {
            debugger;
            var myobject = eval(response.d);
            BuildList(myobject);
        }

        function BuildList(msg) {
            debugger;
            var select = '';
            for (var i = 0; i < msg.length; i++) {
                select += '<option value=' + msg[i].MId + '>' + msg[i].MasterName + '</option>' + ''
            }
            var newselect = select;
            $('#ddlCountry').html(select);
            return false;
        }

        function geterror(xhr, ajaxOptions, thrownError) {
            alert(xhr.status + '</br>' + xhr.responseText + '</br>' + thrownError);
        }



    </script>
</head>
<body>
    <form name="form1" method="post" action="DDLFillWithJSON.aspx" id="form1">
<div>
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwUKMTI5ODc2OTIxM2RkTGlfCS5dXlZC1iQLAsR2qKqwjOs=" />
</div>

        <div>
            <select name="ddlCountry" id="ddlCountry">

</select>
        </div>
    </form>
</body>
</html>
Posted
Comments
Rajeev Jayaram 24-Jul-13 7:27am    
What do you mean by "Hack the server?"
Rockstar_ 24-Jul-13 7:32am    
is there any posiblity of cracking the code?
Rockstar_ 24-Jul-13 7:33am    
using this info , he/she can get the data?
CG0099 24-Jul-13 7:36am    
My friend, you cannot stop hackers from hacking; you can ONLY make the process more difficult for them.
Rockstar_ 24-Jul-13 8:00am    
k k

1 solution

you can retrieve java structs .

client method is virtual ,and only structs server konw the actual method.

it's that you want to konw !
 
Share this answer
 

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)



CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900