Author Topic: browser exploits analysis  (Read 2315 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
browser exploits analysis
« on: June 25, 2006, 08:16:06 PM »
Hi malware fighters,

When considering  in-browser security, it is good to know more about the way the browser can be exploited:
extremely long url
Read this interesting article, and also try to do something yourself.
Download the free Web Bug 5.3.2 software, to be able to analyze browser traffick yourself. Go here: http://www.cyberspyder.com/webbug.html.

polonus
« Last Edit: June 28, 2006, 10:31:10 AM by kubecj »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

neal62

  • Guest
Re: browser exploits analysis
« Reply #1 on: June 26, 2006, 01:35:29 AM »
Thanks for the information Polonus.  :)

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: browser exploits analysis
« Reply #2 on: June 27, 2006, 08:32:44 PM »
Hello malware fighters,

If your software is not completely up to date,
you can easily infect your machine.
If you want to analyze what you get into your browser,
you have various tools at
your disposal. One tool is wget.
I fire it up from a mem stick and for instance log
the following: wget -r -m -b -k www.searchlores.org.
This get saved as an ever-increasing wget-log
until you close down the machine.
Or wget http://www.yoursite.org and this is being
saved as index.html
(open it with firefox.exe or flock.exe) and you
have a html file in plain text,
the next will be index.html2, the next index.html3 etc.
Something like that can be achieved through
a program called webbug,
or when you interested in link content  from
a particular site: webcow or Intellitamper
(for which you can even make your own dictionaries).
An additional program for that purpose is links extractor.
To see all that your browser is
sending step by step install an add-on
in your Firefox or Flock browser like Tamper Data.
Learn a bit what your browser is
doing under the hood,
know why you should have your visors raised,
like NoScript, why you should know what are possible
dubious sites by searching with www.scandoo.nl.
Why you scan your hyperlinks with the
DrWeb scanner plug-in. Even then there could
be the accidental surprise, but rarely,
because you surf with security in mind,

polonus
« Last Edit: June 27, 2006, 08:37:28 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!