Our Community is 940,000 Strong. Join Us.


URL Spoofing


Neutrino
03-18-2004, 06:35 PM
This is a warning to whomever might still be unaware. Certain browsers ha a vulnerabilty alowing a scammer's site to prettend to be a legitimate one.

You could be at iwanttohackyou.com and your url would indicate Paypal.com

you can go here to test your browser for the vulnerability:

http://secunia.com/internet_explorer_address_bar_spoofing_test/

then click on:
Click this link to see if you are vulnerable:
Click Here to Perform Test!

if your url sais www.microsoft.com you are vulnerable

Note: be aware your antivirus might scream at you that it detected a trojan, that is not true this site a legitimate security site and the trojan is just a simulation to test your browsers security.


I have tested this with mozilla firefox and the result was something like this:
http://www.microsoft.com%01%00@secunia.com/internet_explorer_address_bar_spoofing_test/

therfore clearly indicating something is amiss

mi IE test could not be fully completed since Mcafee jumped firts and nuked the simulated trojan

Add your comment to this topic!