Results 1 to 7 of 7

Thread: Tabbed Browser Spoofing Tests..

  1. October 20th, 2004, 03:27 PM #1
    MrLinus
    MrLinus is offline
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,323

    Tabbed Browser Spoofing Tests..

    Secunia released a listing of bugs that affects a variety of tabbed browsers. Check out their site to see the POC in action. I can see a variety of phishes coming out of this along with other potentials (e.g., have a link to AO and use the option to popup a "log in" javascript box).
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage
    Reply With Quote Reply With Quote
  2. October 20th, 2004, 04:40 PM #2
    KorpDeath
    KorpDeath is offline
    Priapistic Monk KorpDeath's Avatar
    Join Date
    Dec 2001
    Posts
    2,628
    Well, here's a test to see how concerned Mozilla is with security.... Guess we'll have to wait and see how long it takes, again.

    Thanks for the headds up. I guess I should bookmark that site one of these days... hehe
    Mankind have a great aversion to intellectual labor; but even supposing knowledge to be easily attainable, more people would be content to be ignorant than would take even a little trouble to acquire it.
    - Samuel Johnson
    Reply With Quote Reply With Quote
  3. October 20th, 2004, 05:14 PM #3
    kurt_der_koenig
    kurt_der_koenig is offline
    the beign of authority kurt_der_koenig's Avatar
    Join Date
    Jan 2004
    Location
    Pa
    Posts
    567
    umm.Always wondered about this..I noticed in Mozilla, if I have one tab open with Hotmail and one with AO that hotmail will start to copy my logon name from AO. Along with Korpdeath, Thanx for the heads up!
    Reply With Quote Reply With Quote
  4. October 20th, 2004, 06:29 PM #4
    Maverick811
    Maverick811 is offline
    Top Gun Maverick811's Avatar
    Join Date
    Oct 2001
    Posts
    853
    Interesting...

    Tested my browser (Firefox 1.0), and I'm vulnerable as expected. Does anyone know if the malicious website triggering this vuln. would have any way of knowing what site you 'thought' you were feeding data to?
    - Maverick
    Reply With Quote Reply With Quote
  5. October 20th, 2004, 07:01 PM #5
    DemonicKn1ght
    DemonicKn1ght is offline
    Banned
    Join Date
    Aug 2004
    Posts
    29
    There is an extension for Firefox called Spoofstick, which displays the host of the site (or something like that) just below your nav bar in a customizable color and size. I'm not sure if that would exactly help with this, but it certainly helps with other phishing scams like spoofed sites.
    Reply With Quote Reply With Quote
  6. October 21st, 2004, 05:04 AM #6
    bquine
    bquine is offline
    Member
    Join Date
    Oct 2001
    Posts
    84
    I read over at the Opera forums that they will be addressing this in the 7.6 release. Couldn't find an ETA on it though. Cheers MsMittens.
    Reply With Quote Reply With Quote
  7. October 21st, 2004, 05:36 AM #7
    hypronix
    hypronix is offline
    Senior Member
    Join Date
    Jul 2003
    Posts
    813
    The location of the JS script cannot be shown by Spoofstick.

    However for Firefox users I can only recommend to be careful when new JS windows show up... click cancel then investigate the source code on the originating webpage, and make sure you don't actually get redirected through other pages that might contain this code.

    Thanks for the heads up MsM.
    /\\
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules