Author Topic: Cross site request forger  (Read 2213 times)

AGDSL

  • Assistant Team\Cup Admins
  • DEMO UPLOADER!
Cross site request forger
« on: December 13, 2009, 12:30:27 AM »
prosoxi to sigekrimeno post to kano gia prostasia kai oxi gia epitheseis i epithesi einai adikima

oi perisoteroi apo emas exoume pare dose me polla accounts mporei na exoume dikaiomata (admins moderator) se sites i akoma na kanoume ilekronikes agores
to parakato sistima epithesis pou tha anafero einai sxetika kainourgia alla arketa epikindini.
To simantikotero einai oti xoris tin thelisi sou mporei na kaneis energeies mesa apo to account sou xoris esi na to theleis me krimena links mesa se spams xrisimopoiontas ta cookies pou xrisimopoiei o broswer mas

liseis gia tin apofigi tis epithesis
pote na min epilegoume ston broswer mas na apothikeui automata tous kodikous mas
na kanoume logout kathe fora pou den xreiazomaste to account mas
na xreisimopoioume ena diaforetiko broswer gia tis episimes energeies mas sto internet kai allo gia to serfarisma
ta ipopta links na ta anoigoume me ton broswer gia serfarisma kai na vlepoume to source code
phgh-analitikotera i morfi epitheseis
link

stEWIE

  • DV zombie
  • ostouhc
Re: Cross site request forger
« Reply #1 on: December 13, 2009, 02:13:14 AM »
.
One day when we 're far away
from everything that hurts,
♫ drink wine and screw is
all we 'll do ♫
every day

TYRANOUS-

  • DV zombie
Re: Cross site request forger
« Reply #2 on: December 13, 2009, 02:17:04 AM »
LETS DOT IT

..

sinister_evil

  • Administrator
  • DV zombie
  • For sale
Re: Cross site request forger
« Reply #3 on: December 13, 2009, 02:25:16 AM »
ti malakiara.
apaitw pisw ta 2 lepta tis zwis moy poy spatalisa gia na diabasw ayti ti pipa.

btw been there done that. diname se ena forum link gia kati k epi tis oysias itan ignore gia ena sygkekrimeno melos ;p

AGDSL

  • Assistant Team\Cup Admins
  • DEMO UPLOADER!
Re: Cross site request forger
« Reply #4 on: December 13, 2009, 03:44:09 AM »
re sini den exoun oloi tis dikes sou gnoseis mporei esi na gnorizeis pos na prosteutis apo tetoiu eidous epithesis alla i plionotita ton anthropon den exoun idea kai eukola mporei na ginoun thimata
kai den prokeite gia tin asfaleia enos forum pou afora tous admins pou ofeiloun na exoun gnoseis alla kai gia simantika zitimata opos to e-banking pou afora aplous users
mporei gia esena na einai apli kathimerinotita na koitas to source code opos kai gia emena alla gia tous perisoterous den einai:P

sinister_evil

  • Administrator
  • DV zombie
  • For sale
Re: Cross site request forger
« Reply #5 on: December 13, 2009, 09:20:50 AM »
gia toys perissoteroys poy den einai den exoyn kai admin rights.
parallila sxedon se otidipote einai sxediasmeno estw k me mia stoixeiwdis asfaleia yparxei confirmation step.

p.x. e-banking mporeis fysika na dwseis mia entoli metaforas oloy toy ypoloipoy se ena logariasmo alla 8a soy bgalei kai ena para8yro meta (poy den mporei na forgaristei) poy 8a leei -metafora x euro se ### account? opote ul.
(ase poy se tetoia 8emata zitaei kai confirmation code apo mixanaki.. alli pipa ekei)

anyway 8ewrw pio simantiko problima phising sites para ayto.

sAVAZz

  • DV zombie
Re: Cross site request forger
« Reply #6 on: December 13, 2009, 01:09:02 PM »
.

..........................................................

AGDSL

  • Assistant Team\Cup Admins
  • DEMO UPLOADER!
Re: Cross site request forger
« Reply #7 on: December 13, 2009, 01:22:54 PM »
profanos kai to phishing sites einai pio epikindino kai den eipa oti diavazontas to post tha gineis white hacker apla to egrapsa gia na gnorisoun to provlima kai me aplous tropous na prostateutoun gia ta phishing site den mporeis na kaneis kai polla esi o idios theleis voitheia apo antimalware programmata
episis tha sinfoniso mazi sou oti ta perisotera site pou theloun na legontai asfali eite meta apo ligo se kanoun log out automata eite opos eipes sou zitoun deuteri epiveveosi alla oxi ola

klinontas thelo na sou po oti den egrapsa oti einai i monadiki epithesi oute i pio epikindini<--profanestata des to loipon san ena topic me liges gnoseis pou poli den exoun oste na exoun to nou tous kai se ayto

ps. i pliroforisi den einai kaki apla skepsou posoi exoun pc ton 2000e kai sernete gt to exoun fortosei me 1233214 anti-malware anti-spyware anti virus kai antitispanagiastamatia
kai nomizoun oti einai asfaleis ama exeis doulepsei se kana magazi me pc service katalaveneis
gia to poso asxetos mporei na einai kapoios