Re: Don't trust the Lock icon either!

Author	All Replies
Googled Yay, I have FIOS join:2001-08-13 Orchard Park, NY ·VoicePulse	reply to justin Re: Don't trust the Lock icon either! I was thinking some more about this bug and I came up with an even scarier usage. Using the Apache "Redirect" directive you can phish an entire site! Just put this into your httpd.conf! Redirect /test "http://www.domainyouwant.com^A@www.domainyouhave.com" Now anyone who visits www.domainyouhave.com/test will be redirected to the phished site! Doing this makes IE automatically modify EVERY link on the page to a phished version! -- DirecWay DW3000 DRS, SatMex 5 1170 gateway 164, P3-533/256 MB, AOL+ 7.0 4114.10712 on 98SE w/ICS,shared to 2 x 2K Pro, 1 x Redhat Linux 7.3, 1 x Netgear 802.11b
	to forum · permalink · · 2003-12-12 17:43:22 ·
justin Australian join:1999-05-28 Brooklyn, NY Host: IPv6 Business Connectiv.. Home/Office setup .. Console/Handheld g.. Console Tech	thats cute. I figured there would be creative use of redirectors. I mean - you could post one of those "Special offer" links, the ones that nobody expects to look correct because they are long and have affiliate pay-on-click codes in them? - and then redirect to a phished version of SBC DSL signup page and keep them within it. Then collect credit card numbers for days before the victims noticed.
	to forum · permalink · · 2003-12-12 17:48:59 ·


Monday, 09-Nov 21:41:15	Terms of Use \| Privacy Policy \| Hosting by www.nac.net - DSL,Hosting & Co-lo \| feedback \| contact over 10 years online! © 1999-2009 dslreports.com. page compression OFF