Browser injection ALERT ( I.E. - FIREFOX - OPERA - ETC ) - GoFuckYourself.com

SmokeyTheBear · 12-20-2004, 12:28 AM

This was posted the other day ,but most people were not aware it affected lots of browsers..

- Internet Explorer
- Mozilla / Firefox / Camino
- Opera
- Konqueror
- Safari
- Netscape
- iCab
- OmniWeb
- Internet Explorer for Mac
Microsoft Internet Explorer is reported prone to a vulnerability that may allow a Web site to hijack the contents of a trusted window. This issue may allow a remote attacker to carry out phishing style attacks.

This issue arises as a user visits a malicious site and follows a link to a trusted site. Once the link to the trusted site is followed, the victim must open a pop up window from the trusted site that can be influenced by the attacker's site.

If successful, the contents of the target site's window can be spoofed resulting in phishing style attacks.

http://www.earthunplugged.org/gfy/

If it doesn't work , tell us what you got and what settings.

Libertine · 12-20-2004, 12:35 AM

Works in IE, not in Firefox.

toddler · 12-20-2004, 12:36 AM

doesn't work. firefox 0.9.2. No popup. I see
in the bottom status bar a JS init , but nothing happens upon click.

sucker · 12-20-2004, 12:36 AM

Quote:

Originally posted by punkworld
Works in IE, not in Firefox.

Pornwolf · 12-20-2004, 12:37 AM

Doesn't work in Mozilla for me.

toddler · 12-20-2004, 12:37 AM

I'd test with IE, but I wouldn't ever surf GFY with
IE. Not after the, at least 1, iframe using advertiser this year. Using IE is like barebacking in Brazil.

SmokeyTheBear · 12-20-2004, 12:38 AM

Aha theres a slight tweak for it to work in all browsers

Trixxxia · 12-20-2004, 12:39 AM

Maybe I'm missing something but neither work for me - no windows open

SmokeyTheBear · 12-20-2004, 12:46 AM

Quote:

Originally posted by TopBucksTrixxxia
Maybe I'm missing something but neither work for me - no windows open

What browser ?

if all else fails try this one instead..

http://secunia.com/multiple_browsers...bility_t est/

Drake · 12-20-2004, 12:56 AM

Smokey, what's supposed to happen?

I clicked your link and then I clicked the GFY link on it. It opened in a new window and looks like the login to the GFY admin section. It reads "You have been granted admin status". Is this good or bad?

I'm using IE.

Trixxxia · 12-20-2004, 12:58 AM

Quote:

Originally posted by SmokeyTheBear
What browser ?

if all else fails try this one instead..

http://secunia.com/multiple_browsers...bility_t est/

IE 6.0
Firefox 1.0 (I think)

SilverTab · 12-20-2004, 01:01 AM

nothing's happening with firefox 1.0 here...

fris · 12-20-2004, 01:03 AM

you sir are the weakest link. goodbye.

fuzebox · 12-20-2004, 01:09 AM

Holy fuck that is wicked...

http://secunia.com/multiple_browsers...bility_t est/ worked, using Firefox on Linux.

Edit: and the URL won't post for some reason.

fuzebox · 12-20-2004, 01:14 AM

Quote:

Originally posted by fris
you sir are the weakest link. goodbye.

SmokeyTheBear · 12-20-2004, 01:29 AM

Quote:

Originally posted by fuzebox

penis envy

SmokeyTheBear · 12-20-2004, 11:21 AM

http://secunia.com/multiple_browsers...bility_t est/

gfy breaks the url up with a line br

try this

http://tinyurl.com/4zbxd

12-20-2004, 12:28 AM	#1
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	Browser injection ALERT ( I.E. - FIREFOX - OPERA - ETC ) This was posted the other day ,but most people were not aware it affected lots of browsers.. - Internet Explorer - Mozilla / Firefox / Camino - Opera - Konqueror - Safari - Netscape - iCab - OmniWeb - Internet Explorer for Mac Microsoft Internet Explorer is reported prone to a vulnerability that may allow a Web site to hijack the contents of a trusted window. This issue may allow a remote attacker to carry out phishing style attacks. This issue arises as a user visits a malicious site and follows a link to a trusted site. Once the link to the trusted site is followed, the victim must open a pop up window from the trusted site that can be influenced by the attacker's site. If successful, the contents of the target site's window can be spoofed resulting in phishing style attacks. http://www.earthunplugged.org/gfy/ If it doesn't work , tell us what you got and what settings. __________________ hatisblack at yahoo.com

12-20-2004, 12:35 AM	#2
Libertine sex dwarf Join Date: May 2002 Posts: 17,860	Works in IE, not in Firefox. __________________ /(bb\|[^b]{2})/

12-20-2004, 12:36 AM	#3
toddler Confirmed User Join Date: Jun 2002 Location: austin, tx Posts: 1,911	doesn't work. firefox 0.9.2. No popup. I see in the bottom status bar a JS init , but nothing happens upon click. __________________ http://www.flickr.com/photos/zoddler/

12-20-2004, 12:37 AM	#5
Pornwolf Drunk and Unruly Join Date: Jan 2002 Location: Hollywood Posts: 22,712	Doesn't work in Mozilla for me. __________________ I've trusted my sites to them for over a decade... Webair, bitches.

12-20-2004, 12:37 AM	#6
toddler Confirmed User Join Date: Jun 2002 Location: austin, tx Posts: 1,911	I'd test with IE, but I wouldn't ever surf GFY with IE. Not after the, at least 1, iframe using advertiser this year. Using IE is like barebacking in Brazil. __________________ http://www.flickr.com/photos/zoddler/

12-20-2004, 12:38 AM	#7
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	Aha theres a slight tweak for it to work in all browsers __________________ hatisblack at yahoo.com

12-20-2004, 12:39 AM	#8
Trixxxia Confirmed User Industry Role: Join Date: Aug 2004 Location: Montreal, Canada Posts: 5,600	Maybe I'm missing something but neither work for me - no windows open

12-20-2004, 12:56 AM	#10
Drake Hello world! Industry Role: Join Date: Mar 2003 Posts: 12,508	Smokey, what's supposed to happen? I clicked your link and then I clicked the GFY link on it. It opened in a new window and looks like the login to the GFY admin section. It reads "You have been granted admin status". Is this good or bad? I'm using IE.

12-20-2004, 01:01 AM	#12
SilverTab Confirmed User Join Date: Nov 2001 Location: MTL Posts: 5,060	nothing's happening with firefox 1.0 here... __________________ mmm my sig was too big... no more cool animation but hey still! need php? ICQ: 94586959

12-20-2004, 01:03 AM	#13
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 55,372	you sir are the weakest link. goodbye. __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. WP Stuff

12-20-2004, 01:09 AM	#14
fuzebox making it rain Industry Role: Join Date: Oct 2003 Location: seattle Posts: 22,117	Holy fuck that is wicked... http://secunia.com/multiple_browsers...bility_t est/ worked, using Firefox on Linux. Edit: and the URL won't post for some reason. Last edited by fuzebox; 12-20-2004 at 01:11 AM..

12-20-2004, 11:21 AM	#17
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	http://secunia.com/multiple_browsers...bility_t est/ gfy breaks the url up with a line br try this http://tinyurl.com/4zbxd Last edited by SmokeyTheBear; 12-20-2004 at 11:22 AM..