RE: stupid IE7 question



Don't waste your time finding ways & means to hide an URL in any form. They
are useless and doesn't help in anyway. The basic thing an attacker will do
is to use a mitm proxy to find out all those GET POST request and retrieve
those *relatively* hidden url.

Rather be concerned about what goes as parameter via GET or POST. I like the
idea of tamperproof _VIEWSTATE implemented in ASP.NET. Most of the issues of
parameters sent insecurely are well taken care with appropriate encryption
and CRC check .


-d

-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx] On
Behalf Of jas1@xxxxxxxxxxx
Sent: Tuesday, December 12, 2006 3:19 AM
To: pen-test@xxxxxxxxxxxxxxxxx
Subject: stupid IE7 question

Hi.

I am currently testing a proprietary (supposedly) secure web based
application. The application was built around users with IE6.0 and above,
one of the instances of this is that the URL is hidden from the end user
when browsing the application. Of course you can ctrl-N or save the page
locally to gain the URL, but most end users would not be looking for the
URL. I advised a while back that the application should not be passing
sensitive info via the URL in the first place. On a recent test I thought I
would use IE7 and found that 'for security' reasons the URL is always
displayed, greyed out. The issue here is that some internal/external
proprietary applications will now display sensitive info via the URL that
could cause 'serious' information disclosure - apart from relaying to the
vendor to code their apps more securely, does anyone have any more
suggestions please?

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=70160000
0008bOW
------------------------------------------------------------------------



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------



Relevant Pages