United
- Yahoo! again - XSS in Uncategorized (357 Visits)
- Yahoo! again - bad settings? in Uncategorized (252 Visits)
- Fanii nostri in Uncategorized (183 Visits)
- Frustrant in Uncategorized (146 Visits)
- La multi ani România, la multi ani românilor in Uncategorized (137 Visits)
- Weblog.ro - Shell via Local File Inclusion in Uncategorized (119 Visits)
- Yahoo! epic fail - permanent xss unleashed in Uncategorized (50 Visits)
- ... in Uncategorized (38 Visits)
- XSS Ownage - hi5 vs. Yahoo! + video in Uncategorized (2 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam/Hi5 (4) in Uncategorized (2 Visits)
- Ce servicii de mail folositi? in (121 Visits)
- Azi este ziua userilor hackersblog.org in (120 Visits)
- De reţinut in (117 Visits)
- Inca o pierdere de timp in (107 Visits)
- De tinut minte in (106 Visits)
- Twitter in (78 Visits)
- Un nou membru in (74 Visits)
- Interviu la Radio Lynx in (70 Visits)
- 2009 in (51 Visits)
- Editori noi. in (35 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam/mail (2) in (199 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam (1) in (139 Visits)
- Ce nu se invata la scoala - (D)DOS (5) in (104 Visits)
Posted on February 10th, 2009
Reported by PaxNwo.
The injected script is still active and used for stealing yahoo accounts sessions. Do no access the domain unless you deactivate javascript in your browser and do not have an active session on your yahoo mail.
LINK: http://timetags.research.yahoo.com
The vulnerability is in the title of the posted remix.
Screenshots:
—————————————————————————–
Raportat de catre PaxNwo.
Scriptul injectat este inca activ si este folosit pentru a fura sesiunile active de la conturile Yahoo!. Nu accesati domeniul decat cu javascript dezactivat si delogati de pe mailul Yahoo! altfel puteti ramane fara contul mail.
LINK: http://timetags.research.yahoo.com
Vulnerabilitatea se afla in titlul “remixului” postat.
Screenshots:
February 10th, 2009 at 7:53 pm
ouch. eu as zice sa scoti linkul ala, ca sunt multi care or sa dea click fara sa citeasca?
February 10th, 2009 at 7:54 pm
Merci ca mi-ai zis. Era scos doar la ro version.
February 10th, 2009 at 9:14 pm
Dar daca cookie-ul de sesiune are atributul HttpOnly? Mai mere? Unele platforme (de ex. ASP.NET) au pentru cookie-urile administrate de framework atributul acesta automat, chiar de prin 2003 daca nu ma insel.
February 10th, 2009 at 9:18 pm
Si nu, XMLHttpRequest nu va merge ca o alternativa decat la platformele de cacat. Dupa cum scriam aici -> http://ha.ckers.org/blog/20070719/firefox-implements-httponly-and-is-vulnerable-to-xmlhttprequest/#comment-85043 numai platformele foarte maro ce emit cookie-ul de sesiune la fiecare raspuns HTTP sunt vulnerabile.
February 10th, 2009 at 9:50 pm
@Andrei: In primul rand, la Yahoo nu sunt HttpOnly. In al doilea rand, cum HttpOnly nu e un standard, nu toate browserele tin cont de acel atribut (Opera spre exemplu), in consecinta nu e indicat sa te bazezi pe HttpOnly. Mai bine iti securizezi site-ul.
February 10th, 2009 at 9:53 pm
Bineinteles ca validarea inputului si encodarea corecta a outputului sunt lucruri sfinte in functionarea unei aplicatii software. HttpOnly este nesuportat corect de cam nici un browser momentan si are statut de leucoplast. Totusi consideram oportun sa il mentionez.
February 10th, 2009 at 9:53 pm
super tare frate
, si yahoo si gugal au avut articole cu titlu epic fail =))
February 12th, 2009 at 12:25 am
aiurea că l-ai făcut public. mai bine îl vindeai
February 12th, 2009 at 2:26 pm
bine pax
))
February 12th, 2009 at 2:56 pm
my ass
, kenpachi l-o facut , ii dau la ciocatu lu pax.
March 1st, 2009 at 4:44 am
http://www.kaskus.us/showthread.php?t=1428092
someone steal your post
use google translate if you don’t understand
March 1st, 2009 at 3:29 pm
is neamuri de rRomi:)))
March 14th, 2009 at 12:14 am
Se pare ca nu mai merge linku http://timetags.research.yahoo.com