@pichi-wuana SQLi usually targets data on the server. XSS plants JS in the browser that executes in the browser of whomever sees it next - other users, or an admin account are possible targets. JS can then give up session data or redirect them to a phishing site, etc
It makes several years that this post is status-planned. There are reason to consider it won’t be status-completed in the upcoming years.
So whatever I can do, my account can be hijacked anytime because web browser plugins don’t exists on mobile (thus, no https everywhere). Once done, it can be u...
Firesheep sniffs the network looking for session id's and makes it very easy for an attacker to hijack this authenticated session. It should be noted that Firesheep is nothing new ; it just makes this attack very easy. Many websites like Facebook (EDIT: Actually Facebook has patched this vulnerab...
The Open ID spec requires that relying parties differentiate between HTTP and HTTPS URLs:
11.5.2. HTTP and HTTPS URL Identifiers
Relying Parties MUST differentiate between URL Identifiers that have different schemes.
But StackExchange (et al) strips the URL provided down to the base do...
@user2284570 I would posit that this particular risk is effectively imaginary. It's what Schneier calls a "movie plot threat." Quite plausible theoretically, but in practice, the real level of risk is zero, or near enough to make no difference.
@Gilles internal links always redirect to the plaintext version of http. There’s no web browser extensions on Webᴏꜱ.
@Xander : I agree it tends to be purely theoretical. Only 70 persons were sentenced for that kind of thing on twitter (it was about the terrorists attacks of Charlie Hebdo).
@RоryMcCune : the point is to have cookies or passwords being sent in plaintext.
@RоryMcCune : so this exclude major web browsers on android. Though it would be interesting to know if pages loaded through their mobile app always use ʜᴛᴛᴘꜱ or behave like the real site.
@Developer not sure what give you the idea that no one talks about LAN hacking. I'd suggest looking up the terms "mimikatz" "powershell empire" "python responder"
there must be some passive way, i heard stories about people getting access to 1 machine in LAN & easily then exploiting whole network, but what if network is watched -- tools like mimikatz won't help
pivoting from a compromised machine is very much active, and is in fact the typical way you'd progress an attack: find one weak machine, then use it as a base
@RоryMcCune i believe so.. as there was a profile created on that machine with domain admin like an year ago. I believe hashes on a machine gets updated automatically even if admin won't log in for a long time
Otherwise it looks like you are sort of playing and not really learning, just asking simple questions and not really touching on actual penetration testing
@user2284570 So what you're saying is, it did not in fact, happen on Twitter.
Because we're not talking about people being prosocuted for the things they said on the interweb tubes, but for a very specific hijack threat with a much higher bar, which has, in fact, never actually occurred.
Anonymous
21:47
@RoryAlsop Is that a certification that's actually meaningful? (Not sarcastic.) I had been given the impression that most certifications aren't worth very much, but if you think this one is then I might look into it.
actually @IanC I would go even further and say that right now we need good questions even more than answers - we have plenty of people to provide those, but lately most of the new questions have not been great.
@RoryAlsop wow! 17 years is a lot of experience! Yeah, I try to surf, not doing so good lately haha But there are some waves hitting the coast these days :)
@RoryAlsop I hadn't seem this video, last time I watched WSL was the puerto escondido big wave competition, really cool
@AviD Cool! I always been curious about some security issues (mostly on networks), now that I'm starting to read more about protocols (and playing with virtual machines networks) some doubts might appear
@Aria Sure! I made kind of a "virtual lab". 2 Virtual machines running Kali and connected through a virtual network (so I can keep things contained). I've been trying some small things (like pinging, ARP requesting) to see what the packages look like and how the network would behave on unusual situations
what do you mean by basic coding? taking a look at those programs sourcecode?
I've programmed a bit in the past with higher level languages, and even a little bit of C, but never studied sockets for example, think I'll try to learn it
IanC: It's good to know how this works, with strace one can see how it's moving bits etc, other scripting like Python is also good for this
IanC: Lot's of people have issues when it comes to understand why sometimes server sends 512 bytes and sometimes 400, and what is the udp socket buffer, multicast addressing etc
The Open ID spec requires that relying parties differentiate between HTTP and HTTPS URLs:
11.5.2. HTTP and HTTPS URL Identifiers
Relying Parties MUST differentiate between URL Identifiers that have different schemes.
But StackExchange (et al) strips the URL provided down to the base do...
