full-disclosure - Re: hi5 Antiphishing Departement

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <be950f350703250959u78cb24a5va81aaff2f629ab7c@mail.gmail.com>
Date: Sun, 25 Mar 2007 11:59:25 -0500
From: wac <waldoalvarez00@...il.com>
To: beNi <backebackekuchen@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: hi5 Antiphishing Departement

Yep it works. I cloned that and modified it to mail me the user cookie see
http://bottester.hi5.com You have to be logged to make it work ok. Sometimes
doesn't works correctly, it takes you to the home page. Try several times.
No idea why. Sometimes when you modify your profile in hi5 you have to do it
two or three times until it works. Maybe they have some broken code when
updating the database. Adding the subject seems to break it, anyway works
well as a phishing attack since you can tell the user to fill that field.

On 3/24/07, beNi <backebackekuchen@...il.com> wrote:
>
> I felt the need to extend the list of Antiphishing Departements of some
> "Social Networks", so the "Myspace Antiphishing Departement" (
> http://www.myspace.com/antiphishing ) got another friend,
> the "hi5 Antiphishing Departement" ( http://antiphishing.hi5.com ).
>
> Full blog post is available here:
> http://mybeni.rootzilla.de/mybeNi/2007/hi5_antiphishing_departement/
>
> --
> benjamin "beNi" flesch
> mybeNi websecurity - http://mybeNi.rootzilla.de/mybeNi
>
> (coolest guy in da hood)
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/