Internet Explorer - cookie theft issue ?

**Chio** · 06-06-2007, 10:44 PM

Using IE7 it doesn't seem to do anything

It opens a new tab that says Testing !!!!!!! Please wait until this window closes

It never does. Tried twice.

**=] EVIL [=** · 06-06-2007, 10:45 PM

bblastvisit=1179986576; bblastactivity=0; bbthread_lastview=e4c3b376e073001097cafe29c1460a26 a-10-stbp7Bi-739697_i-1181156397_i-739411_i-1181120809_i-739945_i-1181136415_i-740160_i-1181173468_i-740067_i-1181172497_i-740149_i-1181173184_i-740154_i-1181173505_i-740108_i-1181172757_i-739995_i-1181188604_i-740254_i-1181198000_stbp7D

**Donkey Punch** · 06-06-2007, 10:45 PM

would this have anything to do with :

A race condition when navigating to a new site from a page can be exploited to perform certain actions and access the contents of the newly loaded page with the permissions of the old page.

:}

**Donkey Punch** · 06-06-2007, 10:46 PM

Originally posted by =] EVIL [=

bblastvisit=1179986576; bblastactivity=0; bbthread_lastview=e4c3b376e073001097cafe29c1460a26 a-10-stbp7Bi-739697_i-1181156397_i-739411_i-1181120809_i-739945_i-1181136415_i-740160_i-1181173468_i-740067_i-1181172497_i-740149_i-1181173184_i-740154_i-1181173505_i-740108_i-1181172757_i-739995_i-1181188604_i-740254_i-1181198000_stbp7D

Internet Explorer 6 ?

**SmokeyTheBear** · 06-06-2007, 10:48 PM

Originally posted by Chio

Using IE7 it doesn't seem to do anything

It opens a new tab that says Testing !!!!!!! Please wait until this window closes

It never does. Tried twice.

takes about 2 mins .. max ,

**zeruel** · 06-06-2007, 10:52 PM

seems fine with me on IE7...

**SmokeyTheBear** · 06-06-2007, 10:54 PM

Originally posted by Donkey Punch

would this have anything to do with :

:}

yes......

**SmokeyTheBear** · 06-06-2007, 10:55 PM

Originally posted by zeruel

seems fine with me on IE7...

how do you mean fine ?

**SmokeyTheBear** · 06-06-2007, 10:57 PM

firefox users can try this test ( only for friefox )

http://gfy.webspacemania.com/firefox/

**=] EVIL [=** · 06-06-2007, 11:00 PM

WT_FPC=id=21212f8dbea623402c71139209895703:lv=1139 209909843:ss=1139209895703

**Donkey Punch** · 06-06-2007, 11:10 PM

I fear SmokeyTheBear. I'll make sure to never get on your bad side big guy.

**quantum-x** · 06-06-2007, 11:13 PM

copy pasted from
http://seclists.org/fulldisclosure/2007/Jun/0026.html

which was on slashdot 2 days ago

**SmokeyTheBear** · 06-06-2007, 11:25 PM

Originally posted by quantum-x

copy pasted from
http://seclists.org/fulldisclosure/2007/Jun/0026.html

which was on slashdot 2 days ago

actually someone icq'd it to me , that wasn't really the point , the test grabs your gfy cookie if possible and posts using your name in this thread if succesfull , just trying to guage what browsers working/os and such

p..s i dont think i ever pointed out an exploit that i didnt copy from somwhere or another. well thats not entirely true but 99% of them i cut and paste

**SmokeyTheBear** · 06-06-2007, 11:29 PM

Originally posted by quantum-x

copy pasted from
http://seclists.org/fulldisclosure/2007/Jun/0026.html

which was on slashdot 2 days ago

p.s.
the name "EVIL" above is the bot name that if the cookie grab didnt contain enough info will post a partial cookie ( not including password ) onto gfy to show the results of what it did grab.

**Chio** · 06-06-2007, 11:33 PM

The makings for thousands of zangos!

**SmokeyTheBear** · 06-06-2007, 11:33 PM

Originally posted by quantum-x

copy pasted from
http://seclists.org/fulldisclosure/2007/Jun/0026.html

which was on slashdot 2 days ago

btw i wouldnt start questioning my abilities !!! i haxored some butter with a hot knife today so i'm feeling rather saucy

**Donkey Punch** · 06-06-2007, 11:34 PM

Very interesting experiment STB !!

**=] EVIL [=** · 06-06-2007, 11:42 PM

wtf wtf hmm

**=] EVIL [=** · 06-25-2007, 07:20 AM

Hi Smokey

Internet Explorer - cookie theft issue ?

Internet Explorer - cookie theft issue ?

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment