• EBay Persistent Cross Site Scripting (Filter Bypass)

    by
    fb1h2s
    Rate this article
    Published on 08-18-2011 10:29 AM      Number of Views: 956  
    0 Comments Comments
    POC Code to Steel Cookies:




    Vulnerability Effects:
    1) User cookies could be retrieved and misused.
    2) Users could be redirected to fake login pages where passwords could be stolen
    3) The possibility of an XSS worm would be there.
    4) Unwanted transactions could be done in context of logged in user.
    Fixing:
    1) Strong XSS filters should be deployed if html is allowed, make sure the XSS filter is updated on continues basis considering the update of HTML 5 tags.
    2) In case of no HTML, htmlencode all the response.write requests.
    3) Many more filter bypassing tags were discovered for current application and is included along with this report.
    Note: Many more filter bypass could be found.

    Other Filter Bypassing Tags:

    This article was originally published in forum thread: EBay Persistent Cross Site Scripting (Filter Bypass) started by fb1h2s View original post

  • G4H Twitter

  • Latest Posts

    amolnaik4

    Research Resources for MS SharePoint

    This page contains research notes on Microsoft’s SharePoint MOSS and WSS.

    Link:
    https://www.owasp.org/index.php/Research_for_SharePoint_%28MOSS%29

    amolnaik4 Today, 12:25 PM Go to last post
    b0nd

    Lolz, with the title "About Admin" I thought...

    Lolz, with the title "About Admin" I thought Admins of garage have been exposed ;)

    @hazard74, there is always a proper "way" to ask - you need to discover that. It's not that Pentesters don't have...

    b0nd Today, 09:10 AM Go to last post
    hazard74

    Ok, Anant Shrivastava. Im Sorry :)

    Ok, Anant Shrivastava.

    Im Sorry :)

    hazard74 Yesterday, 06:19 PM Go to last post
    Anant Shrivastava

    not exactly this format but a simmilar kind of a...

    not exactly this format but a simmilar kind of a format i have seen as part of malware. This url format was used to get the commands from the remote server. there was a whole bunch of domain names in...

    Anant Shrivastava Yesterday, 05:30 PM Go to last post
    Immaturedevil

    Hi Neo, Thanks for your comment. I have...

    Hi Neo,

    Thanks for your comment. I have already done that... but no success..as these URLs are not recognized by search engines as such. getting some info if anyone has come across with URLs in...

    Immaturedevil Yesterday, 05:21 PM Go to last post