full-disclosure - Re: defacements for the installation of malcode

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <45D63C19.5080501@zone-h.org>
Date: Fri, 16 Feb 2007 20:19:53 -0300
From: Vympel <vympel@...e-h.org>
To: phish_n_bots@...ty.ece.cmu.edu
Cc: php-wars@...testar.linuxbox.org, full-disclosure@...ts.grok.org.uk,
	ge@...uxbox.org, botnets@...testar.linuxbox.org
Subject: Re: defacements for the installation of malcode

Hi, this is a old known "issue" many defacers put in mirrors some type 
of a trojan or some xss trick to stolen hotmail cookie. If someone like 
a "POC" just take a look in Iskorpitx defacements 
(http://www.zone-h.org/component/option,com_attacks/Itemid,43/filter_defacer,iskorpitx/) 
you will found some of this virus ;-)
Also default hotmail/msn site is vulnerable a xss ;-)
Fix: Just disable java runtime machine and never open a link with some 
char codes
Best Regards
Vympel
Zone-H Admin

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/