The Most (Potentially) Lucrative Vulnerabilities

Thursday, July 09, 2009

Originally Posted by Jeremiah Grossman here:
http://jeremiahgrossman.blogspot.com/2009/07/most-potentially-lucrative.html

I think few vulnerability researchers look for them, are unlikely to understand their potential value if found, and probably wouldn’t disclose them anyway. The vast majority of researchers focus on memory corruption issues, browser cross-domain leakage, custom Web application attacks, or flaws in online business logic processes. While all of those vulnerability types are important, subtle issues remain unexplored -- ignored, which could enable one to generate huge dollar figures with no one being the wiser. Oh, and no malware required! An example of one of these vulnerabilities is Cross-Site Cooking (circa 2006) found by Michal Zalewski. Remember it? Fortunately for many, Michal publicly disclosed and vendors patched causing it to be a forgettable non-issue going forward.

Cross-Site Cooking enabled a website (ie http://www.example.com/) to set arbitrary cookies associated to an entire domain with a foreign TLD such as *.com.pl or *.com.fr. The cookie value would be sent to every website having those TLDs. This could lead to delete stored preferences, session identifiers, authentication data, cart contents, etc. Now assume for a moment a similar browser bug existed where a website could set arbitrary cookies for generic *.com, *.net, *.gov, *.mil, or better yet perhaps just *. That cookie value would be sent to all those TLD, or in the latter case all sites. If such a bug existed it would seriously impact all websites not reissuing a session ID post authentication. Forcefully load up (PHP|JSP|ASP)SESSIONID to website visitors and then walk into any account you’d like! While bad as that is defrauding affiliates and affiliate networks is another possibility.

For those unfamiliar, affiliate revenue is BIG business, and generates money based upon cost-per-click and cost-per-conversion. Five and six figures per month is not unheard of and commissions owed are largely tracked through the use of cookies. For a fraudster imagine being able to simultaneously load your Amazon, eBay, Google, etc. affiliate cookie into tens or even hundreds of thousands of browsers in a single banner campaign. Anytime they purchase something on those sites you get paid because your affiliate cookies was received -- stepping on any others if they exist. Kaaachink! Websites receiving unexpected affiliate cookies would more than likely not even see or log it. The same for the user-side of the connection. Plus, cookies have no information on what website set the cookie. All nicely invisible. The reality is we really have no idea if this hasn’t already happened. We do know is some browser plug-ins and ISPs do this sort of thing already (load up their affiliate cookies).

Other targets such as (transparent) proxies could be targeted in a similar way. I'm also keeping my eye on Cross-Origin Resource Sharing, Flash Cookies, and clever timing attacks. Oh, and all the new browser standards coming out. Guaranteed goodness inside. Happy hunting!

8354
Vulnerabilities Webappsec->General
Post Rating I Like this!
Default-avatar
avelin injector http://blogdemellizos.blogspot.com/2014/03/contoh-naskah-drama-singkat-anak-sekolah.html
http://blogdemellizos.blogspot.com/2014/03/kata-kata-mutiara-bijak-malam-hari-indah.html
http://blogdemellizos.blogspot.com/2014/03/kata-kata-mutiara-bijak-ibu-kepada-anaknya.html
http://blogdemellizos.blogspot.com/2014/03/kata-kata-mutiara-doa-untuk-ibu-bunda-tercinta.html
http://blogdemellizos.blogspot.com/2014/03/contoh-naskah-drama-persahabatan-menyesal.html
http://blogdemellizos.blogspot.com/2014/02/kata-kata-mutiara-bijak-motivasi-indah-sore-hari.html

http://blogdemellizos.blogspot.com/2014/02/kata-kata-motivasi-mutiara-bijak-indah-sore-hari.html
http://blogdemellizos.blogspot.com/2014/02/kata-kata-galau-sedih-kesepian-tanpa-cinta-malam-hari.html
http://blogdemellizos.blogspot.com/2014/02/kata-kata-move-on-hati-yang-tersakiti-cinta.html
http://blogdemellizos.blogspot.com/2014/02/kata-kata-mutiara-hati-yang-paling-dalam.html
http://blogdemellizos.blogspot.com/2014/02/kata-kata-doa-mutiara-indah-buat-bunda-tercinta.html
http://blogdemellizos.blogspot.com/2014/02/kata-kata-doaku-indah-pagi-hari-doa-motivasi-bijak-hari-ini.html

http://blogdemellizos.blogspot.com/2014/02/kata-kata-jomblo-ngenes-lucu-gokil-ngaco-romantis.html
http://blogdemellizos.blogspot.com/2014/02/kata-kata-nasehat-mutiara-bijak-islami-pagi-hari.html
http://blogdemellizos.blogspot.com/2014/02/puisi-pagi-hari-ucapan-selamat-pagi-romantis.html
http://blogdemellizos.blogspot.com/2014/02/kata-kata-doa-indah-sabar-dan-ikhlas.html
http://blogdemellizos.blogspot.com/2014/02/kata-kata-nasehat-lucu-ngaco-gokil.html
http://blogdemellizos.blogspot.com/2014/02/kata-kata-ucapan-selamat-tidur-romantis.html

http://blogdemellizos.blogspot.com/2014/01/kata-kata-kesetiaan-cinta-sejati.html
http://blogdemellizos.blogspot.com/2014/01/pantun-gombal-cinta-romantis-gokil-lucu.html
http://blogdemellizos.blogspot.com/2014/01/kata-kata-mutiara-cinta-islam-untuk-wanita.html
http://blogdemellizos.blogspot.com/2014/01/kata-kata-romantis-cinta-malam-hari.html
http://blogdemellizos.blogspot.com/2013/12/kata-kata-galau-cinta-buat-pacar.html
http://blogdemellizos.blogspot.com/2013/12/kata-kata-nasehat-bijak-ayah-tercinta.html

http://blogdemellizos.blogspot.com/2013/12/kata-kata-nasehat-ibu-kepada-anaknya.html
http://blogdemellizos.blogspot.com/2013/12/kata-kata-nasehat-bijak-ibu-tersayang.html
http://blogdemellizos.blogspot.com/2013/12/kata-kata-bijak-pagi-hari-yang-cerah.html
http://blogdemellizos.blogspot.com/2013/11/kata-kata-doa-pagi-renungan-mutiara-pagi-hari.html
http://blogdemellizos.blogspot.com/2013/11/kata-kata-galau-sakit-hati-kecewa.html
http://blogdemellizos.blogspot.com/2013/11/kata-kata-cinta-menyentuh-hati.html

http://blogdemellizos.blogspot.com/2013/11/kata-kata-galau-karena-mantan-pacar.html
http://blogdemellizos.blogspot.com/2013/10/kata-kata-renungan-cinta-malam-hari.html
http://blogdemellizos.blogspot.com/2013/10/kata-kata-bijak-cinta-penuh-makna.html
http://blogdemellizos.blogspot.com/2014/11/kata-kata-nyindir-orang-sombong.html
http://blogdemellizos.blogspot.com/2014/11/kata-kata-malam-minggu-yang-sepi.html
http://blogdemellizos.blogspot.com/2014/11/kata-kata-cinta-buat-gebetan.html

http://blogdemellizos.blogspot.com/2014/11/kata-kata-kecewa-buat-pacar.html
http://blogdemellizos.blogspot.com/2014/11/kata-kata-sedih-buat-pacar.html
http://blogdemellizos.blogspot.com/2014/11/kata-kata-dibohongi.html
http://blogdemellizos.blogspot.com/2014/10/kata-kata-patah-hati-kecewa-karena-cinta.html
http://blogdemellizos.blogspot.com/2014/10/kata-kata-lucu-banget-bahasa-jawa.html
http://blogdemellizos.blogspot.com/2014/10/kata-kata-rindu-buat-pacar.html

http://blogdemellizos.blogspot.com/2014/10/contoh-surat-izin-tidak-masuk-sekolah.html
http://blogdemellizos.blogspot.com/2014/10/kata-kata-sakit-hati-kecewa-untuk-teman.html
http://blogdemellizos.blogspot.com/2014/10/gambar-dp-bbm-anak-racing.html
http://blogdemellizos.blogspot.com/2014/10/kata-kata-sindiran-halus-buat-teman.html
http://blogdemellizos.blogspot.com/2014/10/kata-kata-pacaran-jarak-jauh.html
http://blogdemellizos.blogspot.com/2014/10/gambar-wallpaper-bunga-melati-putih.html

http://blogdemellizos.blogspot.com/2014/10/kata-kata-aku-bahagia-bersamamu.html
http://blogdemellizos.blogspot.com/2014/10/tes-iq-online-indonesia.html
http://blogdemellizos.blogspot.com/2014/10/kata-kata-benci.html
http://blogdemellizos.blogspot.com/2014/10/cinta-bertepuk-sebelah-tangan.html
http://blogdemellizos.blogspot.com/2014/10/kata-kata-anak-racing-drag-balap-motor.html
http://blogdemellizos.blogspot.com/2014/10/model-kebaya-wisuda.html

http://blogdemellizos.blogspot.com/2014/10/kata-kata-sindiran-lucu-gokil-buat-pacar.html
http://blogdemellizos.blogspot.com/2014/10/kata-kata-sindiran-buat-orang-sirik-iri.html
http://blogdemellizos.blogspot.com/2014/10/contoh-surat-kuasa-pengambilan-bpkb.html
http://blogdemellizos.blogspot.com/2014/10/contoh-surat-permohonan-izin-cuti-menikah.html
http://blogdemellizos.blogspot.com/2014/10/contoh-surat-izin-tidak-masuk-kuliah.html
http://blogdemellizos.blogspot.com/2014/10/contoh-surat-permohonan-magang-kerja-resmi.html

http://blogdemellizos.blogspot.com/2014/10/contoh-slip-gaji-bulanan-karyawan-swasta.html
http://blogdemellizos.blogspot.com/2014/10/download-dp-bbm-lucu-gokil-unik-terbaru.html
http://blogdemellizos.blogspot.com/2014/10/sakitnya-tuh-disini.html
http://blogdemellizos.blogspot.com/2014/10/gambar-dp-bbm-sindiran-halus-buat-pacar.html
http://blogdemellizos.blogspot.com/2014/10/gambar-dan-kata-kata-doa-kristen-rohani.html
http://blogdemellizos.blogspot.com/2014/10/gambar-kata-kata-gokil-unik-keren-lucu.html

http://blogdemellizos.blogspot.com/2014/10/gambar-foto-kata-kata-gombal-cinta-romantis.html
http://blogdemellizos.blogspot.com/2014/10/gambar-dp-bbm-motivasi-semangat-pagi-hari.html
http://blogdemellizos.blogspot.com/2014/10/download-gambar-foto-kata-kata-cinta-romantis.html
http://blogdemellizos.blogspot.com/2014/10/wallpaper-kata-kata-galau-lucu-terbaru.html
http://blogdemellizos.blogspot.com/2014/10/gambar-kata-kata-cemburu-cinta-buat-pacar.html
http://blogdemellizos.blogspot.com/2014/10/wallpaper-kata-kata-mutiara-indah-terbaru.html

http://blogdemellizos.blogspot.com/2014/10/wallpaper-kata-kata-cinta-romantis-terbaru.html
http://blogdemellizos.blogspot.com/2014/10/wallpaper-kata-kata-lucu-gokil-unik-terbaru.html
http://blogdemellizos.blogspot.com/2014/10/gambar-foto-kata-kata-mutiara-bijak-islam.html
http://blogdemellizos.blogspot.com/2014/10/gambar-display-picture-bbm-galau-sedih.html
http://blogdemellizos.blogspot.com/2014/10/gambar-display-picture-bbm-mutiara-cinta-romantis.html
http://blogdemellizos.blogspot.com/2014/10/gambar-display-picture-bbm-lucu-unik-gokil.html

http://blogdemellizos.blogspot.com/2014/10/download-foto-foto-lucu-untuk-dp-bbm-terbaru.html
http://blogdemellizos.blogspot.com/2014/10/kata-kata-motivasi-galau-cinta-mario-teguh.html
http://blogdemellizos.blogspot.com/2014/10/gambar-dp-bbm-naruto-shippuden-terbaru.html
http://blogdemellizos.blogspot.com/2014/10/gambar-dp-bbm-kata-kata-mutiara-lelah-menunggu.html
http://blogdemellizos.blogspot.com/2014/10/kata-kata-lelah-hati-ini-menunggu-cinta.html
http://blogdemellizos.blogspot.com/2014/10/gambar-tulisan-galau-sedih-buat-dp-bbm.html

http://blogdemellizos.blogspot.com/2014/03/kata-kata-mutiara-cinta-suami-istri.html
http://blogdemellizos.blogspot.com/2014/10/gambar-dp-bbm-kata-kata-sakitnya-tuh-disini.html
http://blogdemellizos.blogspot.com/2014/09/gambar-dp-bbm-kata-kata-pantang-menyerah.html
http://blogdemellizos.blogspot.com/2014/09/gambar-dp-bbm-kata-kata-bijak-selingkuh.html
http://blogdemellizos.blogspot.com/2014/09/gambar-kata-kata-rindu-mantan-kekasih.html
http://blogdemellizos.blogspot.com/2014/09/gambar-dp-bbm-sakit-kepala-pusing-mumet-jenuh.html

http://blogdemellizos.blogspot.com/2014/09/gambar-dp-bbm-kata-kata-bosan-bete-capek.html
http://blogdemellizos.blogspot.com/2014/09/gambar-dp-bbm-kata-kata-karma-cinta-buat-mantan.html
http://blogdemellizos.blogspot.com/2014/09/gambar-dp-bbm-kata-kata-mutiara-bijak-putus-asa.html
http://blogdemellizos.blogspot.com/2014/09/gambar-dp-bbm-kata-kata-sayang-romantis.html
http://blogdemellizos.blogspot.com/2014/09/gambar-dp-bbm-gokil-lucu-kocak-unik-terbaru.html
http://blogdemellizos.blogspot.com/2014/09/kata-kata-mutiara-bijak-sindiran-lucu.html

http://blogdemellizos.blogspot.com/2014/09/download-gambar-kata-kata-galau-sedih-kecewa.html
http://blogdemellizos.blogspot.com/2014/09/download-gambar-kata-kata-sakit-hati-kecewa.html
http://blogdemellizos.blogspot.com/2014/09/download-gambar-kata-kata-mutiara-bijak-terbaru.html
http://blogdemellizos.blogspot.com/2014/09/kata-kata-rindu-kangen-sahabat-tercinta.html
http://blogdemellizos.blogspot.com/2014/09/kata-kata-romantis-merindukan-seorang-kekasih.html
http://blogdemellizos.blogspot.com/2014/09/gambar-dp-bbm-kata-kata-sindiran-mantan-penghianat.html

http://ikatakataromantis.blogspot.com/2014/01/kata-kata-romantis-buat-mantan-kekasih.html
http://ikatakataromantis.blogspot.com/2014/01/kata-kata-galau-kecewa-sakit-hati.html
http://ikatakataromantis.blogspot.com/2014/01/kata-kata-galau-sedih-patah-hati.html
http://ikatakataromantis.blogspot.com/2014/09/gambar-dp-bbm-kata-kata-sindiran-pacar-sok-sibuk.html
http://ikatakataromantis.blogspot.com/2014/09/kata-kata-menyindir-pacar-yang-cuek-jutek.html

http://ikatakataromantis.blogspot.com/2013/12/kata-kata-galau-sedih-romantis.html
http://ikatakataromantis.blogspot.com/2014/04/kata-kata-sindiran-buat-orang-sombong.html
http://ikatakataromantis.blogspot.com/2014/04/kata-kata-sindiran-buat-orang-munafik.html
http://ikatakataromantis.blogspot.com/2014/04/kata-kata-romantis-buat-istri-tercinta.html

http://ikatakataromantis.blogspot.com/2014/10/gambar-sedih-sakit-hati-buat-dp-bbm.html
http://ikatakataromantis.blogspot.com/2014/10/gambar-tulisan-galau-sedih-buat-dp-bbm.html
http://ikatakataromantis.blogspot.com/2014/09/kata-kata-motivasi-bijak-putus-cinta.html
http://ikatakataromantis.blogspot.com/2014/09/kata-kata-semangat-buat-patah-hati-karena-cinta.html
http://ikatakataromantis.blogspot.com/2014/09/gambar-kata-kata-indah-buat-pacar-tercinta.html
http://ikatakataromantis.blogspot.com/

http://ikatakataromantis.blogspot.com/2014/09/gambar-kata-kata-sayang-tulus-sama-pacar.html
http://ikatakataromantis.blogspot.com/2014/09/gambar-dp-bbm-kata-kata-galau-lelah-capek-jenuh.html
http://ikatakataromantis.blogspot.com/2014/09/gambar-dp-bbm-kata-kata-keren-gaul-gokil.html
http://ikatakataromantis.blogspot.com/2014/09/gambar-foto-dp-bbm-sakit-hati-karena-cinta.html
http://ikatakataromantis.blogspot.com/2014/09/gambar-dp-bbm-kata-kata-lelah-bosan-menunggu.html
http://ikatakataromantis.blogspot.com/2014/09/gambar-kata-kata-marah-kecewa-kesal-buat-pacar.html

http://ikatakataromantis.blogspot.com/2014/09/kata-kata-mutiara-cinta-buat-mantan-kekasih.html
http://ikatakataromantis.blogspot.com/2014/09/gambar-dp-bbm-menghina-menyinggung-mantan.html
http://ikatakataromantis.blogspot.com/2014/09/gambar-dp-bbm-kata-kata-buat-orang-sirik-iri-dengki.html
http://ikatakataromantis.blogspot.com/2014/09/gambar-dp-bbm-kata-kata-sindiran-mantan-munafik.html
http://ikatakataromantis.blogspot.com/2014/09/gambar-dp-bbm-kata-kata-lucu-gokil-buat-mantan.html
http://ikatakataromantis.blogspot.com/2014/09/gambar-dp-bbm-kata-kata-sindiran-buat-pacar-egois.html
1417349438