Hacking HTTP Status Codes(schneier.com)

8 pointsby tewks15 yıl önce2 comments

http://www.schneier.com/blog/archives/2011/02/hacking_http_st.html

2 comments

rst15 yıl önce

Technical details here: https://grepular.com/Abusing_HTTP_Status_Codes_to_Expose_Pri...

The trick is to identify GET requests that will succeed only if the victim is logged into $SITE_OF_INTEREST, and bury them in an

   <img src="https://SITE_OF_INTEREST/more/stuff/here" 
       
       
        ...>

If $SITE_OF_INTEREST doesn't have decent CSRF protection, this is an easy way for a rogue website to not only make a request, but observe the result.

johns15 yıl önce