Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: hi5 Antiphishing Departement
From: wac <waldoalvarez00 () gmail com>
Date: Sun, 25 Mar 2007 11:59:25 -0500

Yep it works. I cloned that and modified it to mail me the user cookie see
http://bottester.hi5.com You have to be logged to make it work ok. Sometimes
doesn't works correctly, it takes you to the home page. Try several times.
No idea why. Sometimes when you modify your profile in hi5 you have to do it
two or three times until it works. Maybe they have some broken code when
updating the database. Adding the subject seems to break it, anyway works
well as a phishing attack since you can tell the user to fill that field.

On 3/24/07, beNi <backebackekuchen () gmail com> wrote:

I felt the need to extend the list of Antiphishing Departements of some
"Social Networks", so the "Myspace Antiphishing Departement" (
http://www.myspace.com/antiphishing ) got another friend,
the "hi5 Antiphishing Departement" ( http://antiphishing.hi5.com ).

Full blog post is available here:
http://mybeni.rootzilla.de/mybeNi/2007/hi5_antiphishing_departement/

--
benjamin "beNi" flesch
mybeNi websecurity - http://mybeNi.rootzilla.de/mybeNi

(coolest guy in da hood)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]