T�i �? hack phimmoi.net nh� th? n�o? - Ph?n 2

T�i �? hack phimmoi.net nh� th? n�o? - Ph?n 2

J2TeaM Path Disclosure Write-up xss

H�m nay v?a ��ng m?t tu?n t�nh t? ng�y t? hack phimmoi.net (24/06), ch? sau �� hai ng�y - 26/06, t? ti?p t?c ph�t hi?n ra 2 l? h?ng b?o m?t ti?p theo thu?c sub-domain c?a phimmoi.net

C�u chuy?n b?t �?u

Ng�y 26/06, trong l�c v�o xem phim t?i phimmoi, t? ch?t �? ? c�i banner qu?ng c�o ? c?t b�n ph?i. V? �ang s? d?ng uBlock n�n t? kh� ng?c nhi�n khi th?y v?n c� m?t banner hi?n th?.

T? li?n nh?n ph?i chu?t v�o banner v� sao ch�p li�n k?t:

http://uniad.phimmoi.net/publisher/go/?bannerid=673&zoneid=3&dtime=1467368202&ctype=CPD&domain=phimmoi.net&verify=fe8043c8f4e38373918ba129a804b5d4&href=http%3A%2F%2Fcuuam.360game.vn%2Fintro%2Fcackpg3%2Flanding%2Findex.html%3Futm_source%3DBanner%26utm_medium%3DPhimmoi.net%26utm_content%3DPhimmoi.net_PlayerPage_Right1_300x600

S? d?ng t�nh n�ng Split URL (ng?t c�c tham s?) v� URLdecode c?a Hackbar:

http://uniad.phimmoi.net/publisher/go/
?bannerid=673
&zoneid=3
&dtime=1467368202
&ctype=CPD
&domain=phimmoi.net
&verify=fe8043c8f4e38373918ba129a804b5d4
&href=http://cuuam.360game.vn/intro/cackpg3/landing/index.html?utm_source=Banner&utm_medium=Phimmoi.net&utm_content=Phimmoi.net_PlayerPage_Right1_300x600

V? l� URL c?a m?t banner qu?ng c�o n�n hi?n nhi�n ��y l� m?t tr?nh chuy?n h�?ng li�n k?t. Sau khi th?c hi?n ch�t nghi�n c?u nh?, t? ph�t hi?n ra trong c�c tham s? c?a URL th? ch? c� tham s? href l� b?t bu?c (required). Nh� v?y, t? ho�n to�n c� th? l?i d?ng tr?nh chuy?n h�?ng n�y �? tr? t? b?t c? li�n k?t n�o t? mu?n. V� d?:

http://uniad.phimmoi.net/publisher/go/?href=https://junookyo.blogspot.com
Read More

Unknown Pada 07:47 Komentar