Bugtraq mailing list archives

about bid 17404

From: crack () rome com
Date: 21 Jul 2006 13:30:13 -0000

Hallo

If you modify the code in bid 17404 in such a way:

win = window.open('http://server/prova.zip','new&apos;)
pause (2000)

the user will see the page opening of correct site, and then download alert from original file site (server)
Obviusly the alert form show the real, but if no dns resolution is provided i think that the middle user should try to 
download the file trusting web browser page. 
This is just a gonzo pishing but probably usable in the wild. 

regards

Current thread:

about bid 17404 crack (Jul 22)