defacement in the web today

current trends and examples of website defacement *warning: links to mirrors of hacked sites may contain malicious code*

Wednesday, July 05, 2006

Vulnerability with google

What better way to celebrate the 4th of July than with a vulnerability in Google's site? No, that could never happen. While I definitely know some believe Google can do no wrong and never has problems with their site, not everyone is going to agree. Recent developments may show reason would have to show otherwise. Looks like a cross site scripting attack could allow someone to do a multitude of unwanted things. Collecting all sorts of information that may be stored in cookies or in a persons google account by using cross site scripting to setup a login page. Why would you login to a page like this? Well, maybe it looks like some new Google beta and you just have to try it out. By the time you realize its not real its already too late. Beyond that, exploiting page rank by using the vulnerability is a possibility as well.

0 Comments:

Post a Comment

<< Home