Sign in to follow this  
Followers 0
VicTT

YM Automation

3 posts in this topic

Something just crossed my mind..

I'm using trillian as a mess client and I've noticed that whenever you receive an add request from someone, you get

SOMEONE has added you to their contact list.  You may choose to accept or deny this action.  You may also add this user to your contact list or ignore this user.

Now..the catch is that whenever you click SOMEONE you actually click a link that is yahoo://0:yahoo-profile:SOMEONE

Or when you click accept you are actually clicking yahoo://0:yahoo-accept:SOMEONE

And so forth..

I've tried to do this from a normal browser window and it doesn't seem to work..

IE reports : Invalid syntax error

Mozilla Firefox reports : "yahoo" is an unknown protocol

And I just KNOW I can do these things from a browser..What am I missing?I've seen this done by a few sites(for example, launching yahoo messenger to message someone)..And I remember it done with parameters passed with "?"..

I'm asking this because issuing a "yahoo:pm:<id>" would simplify the hell of automating YM, and it wouldn't be neccesary anymore to fake mouse clicks and such things..I just need to know how it can be done..if anyone has an idea..please contact me, either on PM, or on this thread..Thanx..and excuse my bad english..it's not my native language..


[quote]Together we might liveDivided we must fall[/quote]

Share this post


Link to post
Share on other sites



Wow..Never thought it would be this easy..found a "link" that works..

ymsgr:sendIM?SOMEONE

This is just plain ol' great..I just need to subvert the browser because it needs confirmation to run YM..Now how do I "call" the link, what is this "link", how does it work?etc..if anyone knows, please tell me..


[quote]Together we might liveDivided we must fall[/quote]

Share this post


Link to post
Share on other sites

#3 ·  Posted (edited)

Something else I found out while playing with ymsgr:sendIM?<paramerer>..

If you type "ymsgr:sendIM?HELLO%00WORLD", YM 7 opens a window to HELLO..WORLD is ignored..hmm..buffer overflow exploit???I'm just guessing..I'm kind of a newbie with this..anyway..using this 'method', you can send messages to ids that have special chars in them..I'm just certain there's a way to exploit this request..:)..

EDIT: No, I'm not trying to hack yahoo..it's just smth I noticed..

Edited by VicTT

[quote]Together we might liveDivided we must fall[/quote]

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0