Clickjacking: Quá khứ, hiện tại và tương lai

Clickjacking là một loại hình tấn công liên quan trực tiếp với người dùng và không thể diễn ra nếu không có sự tham gia của người dùng. Theo nghĩa nào đó, Clickjacking một kỹ thuật nhằm đánh cắp các “cú click” của người dùng.

READ MORE »

[Facebook] Cảnh báo ứng dụng câu Like bằng Hijacking

Bằng cách sử dụng những đoạn script Facebook Like Hijacking, attacker hoàn toàn có thể kiểm soát từng click của bạn. Lợi dụng những script này, việc chèn vào các ứng dụng nhằm câu like có thể khiến số like của page tăng nhanh chóng trong khi người dùng hoàn toàn không hay biết việc họ đã bị "ép like" ra sao.

READ MORE »

Critical Facebook vulnerability could have made it easy to hack accounts [VIDEO]

A critical vulnerability was recently found in Facebook that could allow an attacker to hijack, and take control over, accounts on the social network.

No, not the one that required the attacker to just send a single SMS text message. This is a *different* vulnerability that can lead to a complete Facebook account takeover.

This latest security hole was discovered by vulnerability researcher Dan Melamed.
Melamed discovered that a security weakness existed in Facebook’s handling of accounts which have multiple email addresses associated with them.

READ MORE »

HIJACKING A FACEBOOK ACCOUNT WITH SMS

This post will demonstrate a simple bug which will lead to a full takeover of any Facebook account, with no user interaction. Enjoy.

Facebook gives you the option of linking your mobile number with your account. This allows you to receive updates via SMS, and also means you can login using the number rather than your email address.

The flaw lies in the /ajax/settings/mobile/confirm_phone.php end-point. This takes various parameters, but the two main are code, which is the verification code received via your mobile, andprofile_id, which is the account to link the number to.

READ MORE »

ADVANCED DNS HIJACKING TUTORIAL BY Eboz

Its not made by me. I am just sharing it.Eboz is a turkish hacker. Even he pwned pakisani's google, ebay and many sites.

ADVANCED DNS HIJACKING GUIDE
|=-----------------------------------------------------------------------=|
| =------------------= [Still hayattayız, and we are still going to 0wn.-------=]
|=-----------------------------------------------------------------------=|
| =-------------------= [Gaza our greetings!-----------------= |
|=-----------------------------------------------------------------------=|
by eboz
eb0z [at] hotmail.com

-[1]-the DNS Hijacking Presentation

READ MORE »

Facebook Comment's Picture Hijacking

Today Facebook rollouts for FB users to comment with picture on any status. But the feature has a bug which allows malicious user to hijack the picture from any comments if the picture is share by uploading for comment.

After Malicious user hijack the picture, malicious person can change picture description as well as delete the picture.

Let's get started! all you need are status ID and victim's uploaded picture for comment ID.

READ MORE »

DNS Hijacking

Trong một bài viết trước Juno_okyo's Blog đã giới thiệu về DNS Spoofing. Và giờ tiếp tục với DNS Hijacking:

Here is a beautiful Tut From my dear friend H4x4rwOw on DNS HIJACKING
Recommended to download and watch
Download Here
Note:- Only for Educational purpose