[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] Attacking the local LAN via XSS
- To: full-disclosure@xxxxxxxxxxxxxxxxx
- Subject: Re: [Full-disclosure] Attacking the local LAN via XSS
- From: "Zed Qyves" <zqyves.spamtrap@xxxxxxxxx>
- Date: Fri, 4 Aug 2006 12:28:29 +0300
Did not attend BlackHet either however I doubt this is the attack vector.
2. border router vulnerable to XSS
Just as fingerprinting normal web servers, the web server used for
router HTTP management can be fingerprinted, hence the router vendor
itself. Use well known default username/password combination and few
automatic POSTS via javascript/AJAX to "hack" the router and add the
route you want.
Just a thought.
ZQ
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/