iExploit

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Apply for Membership

Top Posters

Who's Online (1)

Powered by Vanilla. Made with Bootstrap.
Looking to introduce yourself? Look no further, and click here! We also have IRC! [irc.evilzone.org #iexploit]
Acunetix Reports explanation
  • Hardcore-Gabber
    Posts: 118
    Please some Members how have more experience in It security cane make a thread to explain some Acuentix vuln like ..

    HTTP Verb Tampering and others ..

    This wouldb be verry helpful for allot of members because i dont finde on any forums a thread like this ..


    [align=center]Thanks .. [/align]
  • Xin
    Posts: 3,251
    Post the description / title it gives and il try explain it in more detail and how you can exploit it but without any information i cant help you
    Xin
  • Hardcore-Gabber
    Posts: 118
    Ok thanks ..

    about 2-3 hours i will be at home then i will post the title and the description ..
  • Hardcore-Gabber
    Posts: 118
    Please cane you explain this vuln ...

    HTTP Verb Tampering


    Vulnerability description


    By manipulating the HTTP verb it was possible to bypass the authorization on this directory. The scanner sent a request with POST HTTP verb and managed to bypass the authorization. An application is vulnerable to HTTP Verb tampering if the following conditions hold:

    it uses a security control that lists HTTP verbs
    the security control fails to block verbs that are not listed
    it has GET functionality that is not idempotent or will execute with an arbitrary HTTP verb




    Affected items


    /img/
    /img/48/
    /img/flash/
    /img/layout/
    /img/layout/thickbox/
    /img/leadpricing/
    /img/navigation/
    /img/socialNetworks/
    /img/uploads/




    [align=center]Thanks[/align]
  • chroniccommand
    Posts: 1,389
    said:


    Please cane you explain this vuln ...

    HTTP Verb Tampering


    Vulnerability description


    By manipulating the HTTP verb it was possible to bypass the authorization on this directory. The scanner sent a request with POST HTTP verb and managed to bypass the authorization. An application is vulnerable to HTTP Verb tampering if the following conditions hold:

    it uses a security control that lists HTTP verbs
    the security control fails to block verbs that are not listed
    it has GET functionality that is not idempotent or will execute with an arbitrary HTTP verb




    Affected items


    /img/
    /img/48/
    /img/flash/
    /img/layout/
    /img/layout/thickbox/
    /img/leadpricing/
    /img/navigation/
    /img/socialNetworks/
    /img/uploads/




    [align=center]Thanks[/align]




    This link should explain it a bit ;)
    http://tinyurl.com/48t4a5o
  • Hardcore-Gabber
    Posts: 118
    Thanks ..

    checked google ..

    but all the the page are explainning how it works the exploit .. i dont finde anywhere a tut about how to exploit this vuln ..
  • Xin
    Posts: 3,251
    Some reading for you to do

    http://jeremiahgrossman.blogspot.com/20 ... -verb.html
    http://www.imperva.com/resources/glossa ... ering.html
    http://www.techrepublic.com/whitepapers ... on/2333231
    Xin
  • Sh3llc0d3
    Posts: 1,910
    Might be worth checking out:

    http://www.owasp.org/index.php/Category ... ab_Project
  • Hardcore-Gabber
    Posts: 118
    Thanks .. xinapse and Semtex .. this will help 100 %
  • Sh3llc0d3
    Posts: 1,910
    No problemo
  • Hardcore-Gabber
    Posts: 118
    How can be exploited this vuln ....

    Unfiltered Header Injection in Apache 1.3.34/2.0.57


    Vulnerability description
    This version of Apache is vulnerable to HTML injection (including malicious Javascript code) through \"Expect\" header. Until now it was not classified as a security vulnerability, since an attacker has no way to influence the Expect header to send the victim to a target website. However, according to Amit Klein's paper: \"Forging HTTP request headers with Flash\" there is a working cross site scripting (XSS) attack against Apache 1.3.34, 2.0.57 and 2.2.1 (as long as the client browser is IE or Firefox, and it supports Flash 6/7+). 

    Affected Apache versions (up to 1.3.34/2.0.57/2.2.1).
    Affected items
    Web Server 
    The impact of this vulnerability
    Malicious users may inject JavaScript, VBScript, ActiveX, HTML or Flash to fool a user in order to gather data from them. An attacker can steal the session cookie and take over the account, impersonating the user. It is also possible to modify the content of the page presented to the user. 

    How to fix this vulnerability
    Upgrade to the latest Apache versions. This flaw has been corrected in Apache versions (1.3.35/2.0.58/2.2.2)


    [align=center]Thanks[/align]
  • Sh3llc0d3
    Posts: 1,910
    http://www.securityfocus.com/archive/1/441014
  • Hardcore-Gabber
    Posts: 118
    Thanks Semtex ...

    also bokmarked security focus ..
  • Sh3llc0d3
    Posts: 1,910
    Yeah securityfocus is definitely a good website.
Add a Comment