Link Injection Redirection Attacks - Exploiting Google Chrome Design Flaw

Hi

Recently with an outcome of Owasp RC1 top 10 exploited vulnerability
list , redirection issues have already
made a mark in that. Even the WASC has included the URL abusing as one
of the stringent attacks.
Well to be ethical in this regard these are not the recent attacks but
are persisting from long time. The only
difference is the exploitation ratio has increased from bottom to top.
So that's the prime reason it has been
included in the web application security benchmarks. But the projection
of redirection attacks is active now.

This post is not about explaining the basics of redirection issues. It
is more about the design vulnerabilities
in browsers that can lead to potential persistent redirection
vulnerabilities. Web application security can be
hampered due to browser problems.

Note: The base is to project the implications of browser inefficiency
and the ease in conducting web application attacks.

Post:
http://zeroknock.blogspot.com/2010/01/link-injection-redirection-attacks.html

Video: http://www.secniche.org/videos/google_chrome_link_inj.html

Browsers need to take care of these issues.

Alternative Apps for Paid apps

1. Foxit Reader for PDF's [http://www.foxitsoftware.com/pdf/rd_intro.php]
2. Pidgin for all IM's [http://www.pidgin.im/]
3. All of the sysinternals applications in one download [http://download.sysinternals.com/Files/SysinternalsSuite.zip]
4. PDF Creator [http://sourceforge.net/projects/pdfcreator/] of course there is a free M$ addon to save as PDF and OpenOffice [http://www.openoffice.org] does it straight from the box
5. Renamer [http://www.den4b.com/downloads.php?project=ReNamer]
6. KMPlayer for all things media [http://www.kmplayer.com/forums/showthread.php?t=4094]
7. Pixlr is Photoshop in the browser [http://www.pixlr.com/app/]
8. WinRar for all your archiving needs [http://www.rarlabs.com]

Top Productivity apps

1. Evernote - I have stupid habit of opening notepads all the time. I keep on making lot of notes. And I have to save them all separately and there is no way to dig around the content. That where this software came into help.

2. IE spell checker - If you miss spell checking with IE browser. Not anymore.

3. Free Fast Mpeg cut- I always wanted to cut video parts of my dvd/cd. and make use of it. Now I can do that easily.

4. PC inspector recovery - You sometimes recycle your data and delete it forever by mistake? And you regret what you have done. Not anymore, Use this software.

5. SecureDisk viewer -
Normally your Optical storage caches part of your system and leaves traces back even after you removed the cd/dvd. Now you can use this software. It comes bundled with nero8.

6. ATnotes: Always forgot something while busy playing around? Feel you are less productive with your time? Wish you had alarm to remind you of everything which you wanted to remember on right time.
Use this to keep alarm and sticky notes.

7. Save2pc/tubetoolbox - How about saving your videos in your desired format on your computer from youtube/google etc.

Must have Windows utilities

1. Adobe Reader - All your PDF collection fits here.

2. Messenger Plus - Add amazing features to your MSN.
www.msgplus.net

3. Multi MSN - Users with multiple MSN ids can use them all at one time.

4. PDFpagemaker - Instead of making your Microsoft Doc read only, Use Pdf maker.

5. Windows Power toys
http://www.microsoft.com/windowsxp/Downloads/powertoys/Xppowertoys.mspx

6. Google Picasa 3

7. Google Earth

8. Lupas Rename 2000v5 - swiss-army knife file renamer, powerful, reliable and free

rename.lupasfreeware.org

9. Process Explorer - Awesome free utils, Mark Russinovich; formerly Sysinternals, bought by Microsoft!; still free!

http://www.microsoft.com/technet/sysinternals/default.mspx

also Filemon, Diskmon, TCPView, Regmon, and many other very handy utlities

10. K-Lite Mega Codec Pack - every codec + kitchen sink; Media Player Classic, Real Alternative, QT Lite

http://www.codecguide.com/about_kl.htm

11. NetTransport - for complex stream capture; only for geeks, though

http://www.xi-soft.com/default.htm

12. DaemonTools - .iso mounter - Version 3.47!, or [ ] uncheck adware on install of newer versions

http://www.daemon-tools.cc/dtcc/index.php?

13. MagicISO

14. Spybot www.safer-networking.org/

15. Winace - For all your compressed formats. Get it from any warez tracker.

16. Winamp - Winamp.com

17. Flash Player

18. TrueCrypt 6.

19. VLC Media Player (videolan.org)

20. Google Chrome Browser - Best browser out there

How to use your Ipod/Iphone/Ipad as your USB Storage

i-FunBox, or iFunbox, is a tool to transfer, manage, browse and explore your files, epub documents, mp4 videos and mp3 musics for iPhone, iPad and iPod Touch via USB. i-FunBox allows you to easily copy files from or to your iPhone. i-FunBox allows you to use iPhone as an external USB drive and search for files on iPhone. It works with iPhone, iPhone 3G, iPhone 3GS, iPad, iPod Touch in Firmware1.x,2.x and 3.x, even without JB (jailbreak). It is compatible with Windows XP, Windows Vista and Windows 7

Hack with PhotoFucket

Nothing on the internet is ever truly private and this hack proves it! Learn how to use PhotoFucket to hack into Photobucket with this video. You'll be able to access Photobucket without a password and view private photos from users. Be careful what you leak though...you might unwittingly create the next big reality TV star!

Learn How to hack Photobucket to view private photos. For more Internet How-To Videos & Articles, visit WonderHowTo.

Cracking WEP (wireless encryption protocol)

1. launch system information for windows on an admin account
2. Go to Network section on the left-hand side
3. Look for the network SSID (the network name), and sitting next to it after the slash will be the passkey.

If the key is stored on the computer try it with WirelessKeyView in Registry Editor