full-disclosure - Multiple websites iframe vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sun, 29 Oct 2006 04:00:40 +0100
From: SkyOut <sky_out@....net>
To: Full Disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Multiple websites iframe vulnerability

I am writing to you these lines in order to inform you of the latest 
security research
results regarding iframe spoofing, available at

- eof-project.net -

What you will find is a list of 70 websites vulnerable to iframe 
spoofing attacks. The
websites are mostly german and 30 of those sites are bank sites.
Together with the above mentioned information you will also find an 
example showing
how this vulnerability can be easily used for phishing attacks.

Yours,
SkyOut/EOF-Project/Helith

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/