- Posts: 1700
- Thank you received: 0
Internet Explorer URL hiding vulnerability
20 years 11 months ago #2041
by sahirh
Sahir Hidayatullah.
Firewall.cx Staff - Associate Editor & Security Advisor
tftfotw.blogspot.com
Internet Explorer URL hiding vulnerability was created by sahirh
I picked this up on the security lists yesterday and played around with it a bit.
There's a vulnerability in IE that allows someone to craft a URL making it appear to be somewhere else.. in other words when you look at the address bar or hover on the link, you'll see the name of the site you think you're at.. but you will be at another page. Obviously this is important because of the number of social engineering scams that can use this (think of people going to pages they think are ebay or paypal)
If you wanna check this out, copy the following code into a text document and save it as .html then open it in IE.. hover on the link and see where it says its taking you.. then click the link.. and notice that you're not actually where you think you are
[code:1]
<html>
<body>
<a href="http://www.google.com%00@tftfotw.blogspot.com">Google</a>
</body>
</html>
[/code:1]
Some people are saying this is a trivial issue.. i disagree, because its very hard to detect unless you look at the source or notice what IP you're connected to... both very unlikely situations.
There's a vulnerability in IE that allows someone to craft a URL making it appear to be somewhere else.. in other words when you look at the address bar or hover on the link, you'll see the name of the site you think you're at.. but you will be at another page. Obviously this is important because of the number of social engineering scams that can use this (think of people going to pages they think are ebay or paypal)
If you wanna check this out, copy the following code into a text document and save it as .html then open it in IE.. hover on the link and see where it says its taking you.. then click the link.. and notice that you're not actually where you think you are
[code:1]
<html>
<body>
<a href="http://www.google.com%00@tftfotw.blogspot.com">Google</a>
</body>
</html>
[/code:1]
Some people are saying this is a trivial issue.. i disagree, because its very hard to detect unless you look at the source or notice what IP you're connected to... both very unlikely situations.
Sahir Hidayatullah.
Firewall.cx Staff - Associate Editor & Security Advisor
tftfotw.blogspot.com
Time to create page: 0.128 seconds