nirgoldshlager.com

davidsopaslabs.blogspot.com

David Sopas - hacking web apps: 3 Open Redirect on Google - UNFIXED

http://davidsopaslabs.blogspot.com/2013/11/3-open-redirect-on-google-unfixed.html

David Sopas - hacking web apps. Thursday, November 21, 2013. 3 Open Redirect on Google - UNFIXED. In the last couple of weeks I discovered three Open Redirect security issues on Google. For those who don't know what is a Open Redirect vulnerability, OWASP. Has a section about it ( https:/ www.owasp.org/index.php/Open redirect. Open Redirects are very attractive for spammers. Why? Https:/ helpouts.google.com/opener? Url=http:/ labs.davidsopas.com. Https:/ helpouts.google.com/opener? Var c = window,. Aopen...

davidsopaslabs.blogspot.com

David Sopas - hacking web apps: April 2014

http://davidsopaslabs.blogspot.com/2014_04_01_archive.html

David Sopas - hacking web apps. Tuesday, April 22, 2014. PhpList CSRF on subscription page. For those who don't know phpList. Is an open source software for managing mailing lists. It is designed for the dissemination of information, such as newsletters, news, advertising to list of subscribers. It is written in PHP and uses a MySQL database to store the information. The software is distributed free under GPL license. (in Wikipedia). I discover a CSRF. So I recommend the download as soon as possible.

davidsopaslabs.blogspot.com

David Sopas - hacking web apps: March 2013

http://davidsopaslabs.blogspot.com/2013_03_01_archive.html

David Sopas - hacking web apps. Sunday, March 24, 2013. FCKeditor is a ready-for-use open source WYSIWYG text editor from CKSource designed to bring common word processor features directly to web pages, simplifying their content creation. It aims to be lightweight and requires no client-side installation. This tool is already deprecated and was updated to CKEditor but still many open-source projects use FCKeditor. I checked the source code and voilà. Of course this vulnerability is not critical. It r...

davidsopaslabs.blogspot.com

David Sopas - hacking web apps: October 2013

http://davidsopaslabs.blogspot.com/2013_10_01_archive.html

David Sopas - hacking web apps. Tuesday, October 29, 2013. How a salesman could hack Prestashop. Continuing my work on analyzing Prestashop. Security, I found that low level employees profiles can hack Prestashop. And possibly the server. Prestashop (I tested under versions 1.5.4.1. Had employee default profiles that may use upload module option to get privilege information. Logistician and salesman profile (with lower privileges than Admin and Superadmin) could use AdminModules. Zip folders = array();.

davidsopaslabs.blogspot.com

David Sopas - hacking web apps: June 2013

http://davidsopaslabs.blogspot.com/2013_06_01_archive.html

David Sopas - hacking web apps. Thursday, June 13, 2013. Microsoft Pinpoint vulnerable to DOM XSS. Using a third-party web application, Microsoft Pinpoint. Site was vulnerable to a DOM XSS that could be used by malicious users to launch attacks. A user could access Ensighten Real-Time Tag Management System. By adding the URL parameter "ensightenVT=1" on the pinpoint.microsoft.com. This would allow to check a couple of Ensighten options. Proof of concept #1:. Proof of concept #2:. 22 Mar 2013: Microsoft r...

davidsopaslabs.blogspot.com

David Sopas - hacking web apps: March 2014

http://davidsopaslabs.blogspot.com/2014_03_01_archive.html

David Sopas - hacking web apps. Thursday, March 27, 2014. How to lose $2100 on bounties. Quite simple. Be late :-). I discovered five security vulnerabilities that were already found from other users and were waiting fixing. Two vulnerabilities on Giftcards. Two vulnerabilities on Magento (eBay). One vulnerability on Google. The estimated value of all these vulnerabilities were about $2100. Note to myself: Better luck next time! Google vulnerability reward program. Subscribe to: Posts (Atom).

davidsopaslabs.blogspot.com

David Sopas - hacking web apps: January 2014

http://davidsopaslabs.blogspot.com/2014_01_01_archive.html

David Sopas - hacking web apps. Friday, January 3, 2014. My ad on your OLX favourites - CSRF style. First of all - Happy New Year to all my readers. OLX is an internet company based in New York City and Buenos Aires, Argentina. The OLX website hosts free user-generated classified advertisements for urban communities around the world and provides discussion forums sorted by various topics. They're are present on more 90 countries. Portuguese OLX domain - olx.pt. When a visitor opened a page with this code:.

homakov.blogspot.com

Egor Homakov: The Achilles Heel of OAuth or Why Facebook Adds #_=_

http://homakov.blogspot.com/2013/03/redirecturi-is-achilles-heel-of-oauth.html

Subscribe to our new blog! Friday, March 15, 2013. The Achilles Heel of OAuth or Why Facebook Adds # =. This is a short addition to the previous rants on OAuth problems. We've got Nir Goldshlager. Working on our side (he simply loves bounties and facebook does pay 'em). We both discovered some vulnerabilities in Facebook. And we joined our forces to demonstrate how many potential problems are hidden in OAuth. All oauth exploits are based on tampering with the redirect uri parameter. Chain of 302 redirects.

davidsopaslabs.blogspot.com

David Sopas - hacking web apps: Google Bots doing SQL Injection - The Proof-of-Concept

http://davidsopaslabs.blogspot.com/2013/11/google-bots-doing-sql-injection-proof.html

David Sopas - hacking web apps. Wednesday, November 6, 2013. Google Bots doing SQL Injection - The Proof-of-Concept. When reading this article about Google Bots doing SQL Injection from Sucuri. I remember that I already saw this somewhere on my Google. Researches. I was right. If you use a special tool included on Google Analytics. A malicious user could launch SQL Injections, or other web attack, on remote websites using Google as a proxy. Check out your access log:. Subscribe to: Post Comments (Atom).