[Phân tích] Vụ chèn mã độc JavaApplet tại KBCHN.NET

Trong một loạt các sự kiện liên quan đến SINH TỬ LỆNH và các site bị tấn công, ngày 29/3/2012, trên HVAonline, thành viên có nickname miyumi2 đã có bài phân tích việc trang web kbchn.net lề trái ("phản động") bị chèn JavaApplet


 Code sau khi được anh Conmale phân tích

Đây là cách thức tương đối phổ biến trong thời gian gần đây, đặc biệt là việc sử dụng các ứng dụng của facebook

Comments

Post a Comment

Để lại góp ý của bạn để blog của mình hoàn thiện hơn :))

Popular posts from this blog

[Hack crack] Tổng hợp Google Dork

Image
/includes/header.php?systempath= /Gallery/displayCategory.php?basepath= /index.inc.php?PATH_Includes= /nphp/nphpd.php?nphp_config[LangFile]= /include/db.php?GLOBALS[rootdp]= /ashnews.php?pathtoashnews= /ashheadlines.php?pathtoashnews= /modules/xgallery/upgrade_album.php?GALLERY_BASEDIR= /demo/includes/init.php?user_inc= /jaf/index.php?show= /inc/shows.inc.php?cutepath= /poll/admin/common.inc.php?base_path= /pollvote/pollvote.php?pollname= /sources/post.php?fil_config= /modules/My_eGallery/public/displayCategory.php?basepath= /bb_lib/checkdb.inc.php?libpach= /include/livre_include.php?no_connect=lol&chem_absolu= /index.php?from_market=Y&pageurl= /modules/mod_mainmenu.php?mosConfig_absolute_path= /pivot/modules/module_db.php?pivot_path= /modules/4nAlbum/public/displayCategory.php?basepath= /derniers_commentaires.php?rep= /modules/coppermine/themes/default/theme.php?THEME_DIR= /modules/coppermine/include/init.inc.php?CPG_M_DIR= /modules/coppermine/themes/c
Read more

[Hack Crack] Full SQL inject cheat sheet - DarkGh0st Team

Image
################################################### # [+]Title: [Full SQL Injections Cheatsheet] ################################################### # [+] About : ################################################### # Author : GlaDiaT0R | the_gl4di4t0r@hotmail.com<mailto:the_gl4di4t0r@hotmail.com> # Team : DarkGh0st Team ( DarkGh0st.Com ) # Greetz: Boomrang_Victim, Marwen_Neo ################################################### # [+] Summary: I* # [1]-Introducing The SQL Injection Vuln # [2]-Exploiting Sql Injection Vuln # [3]-Exploiting Blind SQL Injection Vuln ################################################### [ 1 ]* - Introducing The SQL Injection Vuln : . SQL injection attacks are known also as SQL insertion it 's in the form of executing some querys in the database and getting acces to informations (SQL Vesion, Number & Names of tables and columns,some authentification infos,ect...) [2]* -Exploiting Sql Injection Vuln : .Before proceeding to the
Read more

[Hack crack] Tổng hợp Google Dork 1

Image
inurl:index.php?id= inurl:trainers.php?id= inurl:buy.php?category= inurl:article.php?ID= inurl:play_old.php?id= inurl:declaration_more.php?decl_id= inurl:Pageid= inurl:games.php?id= inurl:page.php?file= inurl:newsDetail.php?id= inurl:gallery.php?id= inurl:article.php?id= inurl:show.php?id= inurl:staff_id= inurl:newsitem.php?num= inurl:readnews.php?id= inurl:top10.php?cat= inurl:historialeer.php?num= inurl:reagir.php?num= inurl:forum_bds.php?num= inurl:game.php?id= inurl:view_product.php?id= inurl:newsone.php?id= inurl:sw_comment.php?id= inurl:news.php?id= inurl:avd_start.php?avd= inurl:event.php?id= inurl:product-item.php?id= inurl:sql.php?id= inurl:news_view.php?id= inurl:select_biblio.php?id= inurl:humor.php?id= inurl:aboutbook.php?id= inurl:fiche_spectacle.php?id= inurl:communique_detail.php?id= inurl:sem.php3?id= inurl:kategorie.php4?id= inurl:news.php?id= inurl:index.php?id= inurl:faq2.php?id= inurl:show_an.php?id= inurl:preview.php?id= i
Read more