Re: hi5 Antiphishing Departement

[wac <waldoalvarez00 () gmail com>]

Yep it works. I cloned that and modified it to mail me the user cookie see
http://bottester.hi5.com You have to be logged to make it work ok. Sometimes
doesn't works correctly, it takes you to the home page. Try several times.
No idea why. Sometimes when you modify your profile in hi5 you have to do it
two or three times until it works. Maybe they have some broken code when
updating the database. Adding the subject seems to break it, anyway works
well as a phishing attack since you can tell the user to fill that field.

On 3/24/07, beNi <backebackekuchen () gmail com> wrote:
> I felt the need to extend the list of Antiphishing Departements of some
> "Social Networks", so the "Myspace Antiphishing Departement" (
> http://www.myspace.com/antiphishing ) got another friend,
> the "hi5 Antiphishing Departement" ( http://antiphishing.hi5.com ).
>
> Full blog post is available here:
> http://mybeni.rootzilla.de/mybeNi/2007/hi5_antiphishing_departement/
>
> --
> benjamin "beNi" flesch
> mybeNi websecurity - http://mybeNi.rootzilla.de/mybeNi
>
> (coolest guy in da hood)
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/