Re: [Full-disclosure] Decrypting SSL for Network Monitoring

[adam <adam@xxxxxxxxx>]

I wasn't intentionally being vague, and I don't honestly know much about
wordpress so the "feature" I exploited may very well be a [popular?] module
and not something custom. In any case, the issue is with the section at the
bottom that parses the referer to determine search engine queries (that
resulted in users landing on the page). It's an excellent concept for SEO
purposes, since relevant keywords will be linked together automagically
through user interaction but it's not really worth the trade off when the
"search query" isn't sanitized.

Also, you shouldn't modify files in real-time since it can (and did) lead to
information disclosure (revealed full path of wordpress installation, I
assume during one of your saves).

All in all, something as simple as $_SERVER['HTTP_REFERER'] =
 @strip_tags($_SERVER['HTTP_REFERER']); at the top of one of the class files
would likely be enough to fix it for the time being.

On Tue, Jun 28, 2011 at 2:30 PM, adam <adam@xxxxxxxxx> wrote:

> My thoughts?
>
> Before posting a URL to FD, make damn sure that it isn't vulnerable to any
> type of injection attacks. Luckily for you, I simply hid everything on the
> page. A malicious attacker could have done significantly worse.
>
> Fix that, and *then* I'll read the article.
>
> On Tue, Jun 28, 2011 at 11:09 AM, Adam Behnke 
> <adam@xxxxxxxxxxxxxxxxxxxx>wrote:
>
>> InfoSec Institute resources author Alec Waters gives you step by step
>> instructions on how to decrypt SSL for network monitoring:****
>>
>> ** **
>>
>> http://resources.infosecinstitute.com/ssl-decryption/****
>>
>> ** **
>>
>> Your thoughts? ****
>>
>> ** **
>>
>> ** **
>>
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> Hosted and sponsored by Secunia - http://secunia.com/
>>
>
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/