HomeCalendarCertificationsColumnsFeaturesForumResourcesVitals
 
Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.
Lost Password?
No account yet? Register
Who's Online
We have 39 guests and 2 members online
EH-Net Donations

Enter Amount:
$
Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations



 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Otherarrow regardin XSS
Ethical Hacker Community Forums
December 04, 2008, 11:03:37 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
   Home   Help Calendar Login Register  
Pages: [1]   alert("xss"),666/topic,1584.0/#lastPost">Go Down
« previous next »
  Print  
Author Topic: regardin XSS  (Read 7538 times)
0 Members and 1 Guest are viewing this topic.
lovewadhwa
Newbie
*
Offline Offline

Posts: 17


View Profile
« on: August 09, 2007, 11:53:17 PM »
What i do need to know is that how encoding specification in html coding helps preventing these attacks.Means i have been reading articles on the same and they say that specifying the character encoding helps prevent XSS since it helps in determining special characters.Now i am n;t getting this.Plz explain how does that happen and how charset encoding specification helps prevent XSS.
Logged
lovewadhwa@gmail.com
BillV
Hero Member
*****
Offline Offline

Posts: 870


View Profile
« Reply #1 on: August 10, 2007, 08:46:27 AM »
If you properly filter/sanitize your input and any gateways/variables, disallow code, etc. you will prevent XSS. Simple as that.
Logged
somebot
Newbie
*
Offline Offline

Posts: 6


View Profile
« Reply #2 on: December 28, 2007, 09:38:10 AM »
This page is being used as an example of XSS vulnerabilities over from sla.ckers.org.

http://www.ethicalhacker.net/component/option,com_smf/Itemid,54'%22%3E%3Cscript%08%3Ealert(%22xss%22)%3C/script%08%3E/script%3E,666/topic,1584.0/

This URL also discloses an SQL injection vulnerability on this very site.

Aha. "mos_menu"... Mambo/Jooma in use == vulnerable. Sad to see, really.
« Last Edit: December 28, 2007, 09:42:05 AM by somebot » Logged
BillV
Hero Member
*****
Offline Offline

Posts: 870


View Profile
« Reply #3 on: December 28, 2007, 09:47:06 AM »
Thank you for pointing this out. I'm sure Don will be looking into the fix for this ASAP.
Logged
somebot
Newbie
*
Offline Offline

Posts: 6


View Profile
« Reply #4 on: December 28, 2007, 10:08:12 AM »
You're all welcome.

As a Linux System Admin for a managed hosting company, I see many of these vulnerabilities nightly (I'm a late-night shift worker). Sadly, many of these vulnerabilities exist with Mambo/Joomla sites. I usually recommend against using those packages, myself.
Logged
ChrisG
EH-Net Columnist
Hero Member
*****
Offline Offline

Posts: 1042


View Profile WWW
« Reply #5 on: December 28, 2007, 01:11:45 PM »
and you recommend what instead?
Logged
...tests i took go here...

http://carnal0wnage.blogspot.com/
somebot
Newbie
*
Offline Offline

Posts: 6


View Profile
« Reply #6 on: December 28, 2007, 04:43:28 PM »
Drupal, if one must use a PHP CMS.
Logged
ChrisG
EH-Net Columnist
Hero Member
*****
Offline Offline

Posts: 1042


View Profile WWW
« Reply #7 on: December 28, 2007, 06:59:47 PM »
i'm sleepy so its probably there, but i dont see the page were it talks about how and why drupal is so inherently better than the other CMS's out there.  or its just because it doesnt use all the mos_whatever modules?
Logged
...tests i took go here...

http://carnal0wnage.blogspot.com/
somebot
Newbie
*
Offline Offline

Posts: 6


View Profile
« Reply #8 on: December 28, 2007, 08:28:50 PM »
Chris,

You asked what I recommend, not what is "recommended". There isn't a page that I based that info off of -- it's from personal experience. I have yet to see a major drupal installation that has been routinely hacked, cracked and used to host child porn, IRC (eggbot anyone?), phishing scams, etc., or provide a way to test privilege escalation attacks after gaining shell access as the Apache system account user. As for Mambo/Joomla, I see these literally every night I am at work. Many times it is the same sites again and again.

A number of sysadmins I know from work or from other associations use Drupal. That's how I learned of it, myself.

Perhaps I should put up a page. But then it would be drowned out by pages with expertise like "Why chmod 777 is NOT a security risk". Ya know?
Logged
ChrisG
EH-Net Columnist
Hero Member
*****
Offline Offline

Posts: 1042


View Profile WWW
« Reply #9 on: December 29, 2007, 09:04:08 AM »
yup i am following on that.

do you think its because there arent as many people running drupal as opposed to joomla that is resulting in what you are seeing?  or something else?

if something is secure only because people arent targeting it (yet) that seems like you may be in either the 1) just wait the hacks will come category or 2) the user and development population is low and dont expect patches or new updates.

oh and since we are talking about CMSs, do any of them have a update management system that would tell you that moduleX or ModuleY are outdated and  should be upgraded?
Logged
...tests i took go here...

http://carnal0wnage.blogspot.com/
somebot
Newbie
*
Offline Offline

Posts: 6


View Profile
« Reply #10 on: December 29, 2007, 03:54:18 PM »
Quote from: ChrisG on December 29, 2007, 09:04:08 AM
yup i am following on that.

do you think its because there arent as many people running drupal as opposed to joomla that is resulting in what you are seeing?  or something else?

if something is secure only because people arent targeting it (yet) that seems like you may be in either the 1) just wait the hacks will come category or 2) the user and development population is low and dont expect patches or new updates.

Yeah, I don't buy the Microsoft-ish argument about "popularity==vulnerability". Anyway, Drupal may or may not be popular. Don't know.

Quote
oh and since we are talking about CMSs, do any of them have a update management system that would tell you that moduleX or ModuleY are outdated and  should be upgraded?

mos_* refer to major [platform-]components of Mambo/Joomla, I believe, and not [add-on] components. The best resource for finding the security vulnerabilities seems to be SecurityFocus and Milw0rm, and not those two packages. They seem more focused on promotion than information (last I looked).

For fun and profit:

http://www.milw0rm.com/search.php?dong=joomla&Submit=Submit

http://www.milw0rm.com/search.php?dong=mambo&Submit=Submit

http://www.milw0rm.com/search.php?dong=drupal&Submit=Submit
« Last Edit: December 29, 2007, 04:12:02 PM by somebot » Logged
somebot
Newbie
*
Offline Offline

Posts: 6


View Profile
« Reply #11 on: January 04, 2008, 08:59:49 AM »
The XSS and SQL injection exploit revealed in this thread for this forum is still not patched or mitigated. If I can be of assistance, let me know (privately).
Logged
Pages: [1]   alert("xss"),666/topic,1584.0/#top">Go Up
  Print  
« previous next »
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com 		Valid XHTML 1.0! Valid CSS!
Page created in 0.058 seconds with 22 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
During the most recent election, I:
 
Support EH-Net

Support EH-Net by
Buying all of your
Amazon items using
the search bar above.
cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

Sadikhov.com
Top IT Cert Sites

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2008 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.