Re: [Full-disclosure] [Argeniss] Alert - Yahoo! Webmail XSS

www.w00tynetwork.com is trying to sell CC cashing services, and
www.w00tynetwork.com/news.htm is using the CreateTextRange(); exploit.


On 4/17/06, Morning Wood <se_cur_ity@xxxxxxxxxxx> wrote:

exploit creates a frameset and redirects to
http://w00tynetwork.com/x/ ,it's interesting that the

redirects to http://211.22.14.50/.yahoomail/x.htm and spoofs a Yahoo
login
page.
upon entering credentals, the site redirects back to
http://mail.yahoo.com
so it simply looks like a bad login.

211.22.14.50 = www.gbigift.com.tw

cheers,
mw

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Relevant Pages

  • Re: [Full-disclosure] AntiAntiSec / Endgame
    ... protect little snots like yourselves. ... Full-Disclosure - We believe in it. ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
    (Full-Disclosure)
  • Re: [Full-disclosure] Two bulletins from Microsoft on Patch Tuesday
    ... and restraint by not responding to your personal jabs, ... Full-Disclosure - We believe in it. ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
    (Full-Disclosure)
  • Re: [Full-disclosure] Barack Obama <-- Not Appropriate
    ... That basically proves you are here to do propaganda - either voluntarily ... Mossad and being paid to post on full-disclosure. ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
    (Full-Disclosure)
  • Re: [Full-disclosure] e-Holocaust
    ... The .com domains were actually Israeli, ... Full-Disclosure - We believe in it. ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
    (Full-Disclosure)
  • Re: [Full-disclosure] The war in Palestine
    ... But people like Schneider ask for this hate. ... Full-Disclosure - We believe in it. ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
    (Full-Disclosure)
Loading