This basically utilizes the web's core principle of composability in order to determine & extract useful information.
XS-Leaks take advantage of small pieces of information that are exposed during interactions between websites.
#Learn365 Day-6: Cross-Site Leaks
Goldmine to Learn: https://t.co/TsqGRWxPq7
Cross-Site Leaks/XS-Leaks is a less explored security issue that usually comes from Side-Channel Attacks. I found this an interesting vector but unusual.
(1/n)
#BugBountyTips #infosec #AppSec
This basically utilizes the web's core principle of composability in order to determine & extract useful information.
XS-Leaks take advantage of small pieces of information that are exposed during interactions between websites.
Cross-Site Oracle.
This can be considered as a querying mechanism. The information used for this attack is of binary form and called Oracles. It usually has an answer of "Yes" or "No". You can say True or False.
For Example: Does User Harsh Exists in the Application. Yes, means that the user is there in the application.
- An attacker requires to smartly form queries in order to successfully execute this attack and gain hold of sensitive information.
Some of the Attacks using Cross-Site leaks are:
1. XS-Search: An attacker try to abuse the query mechanism such as search functionality to leak and get hold of the user's information.
Remediation
- Same Site Lax Cookies
Usual Exploitation Workflow:
1. Define a timeline when there is a Hit vs Miss
2. Start attacking the Querying Endpoint.
3. For Example: ?search=h (Throws a Hit)
search for the next word appended to `h` i.e. ?search=ha otherwise change the word i.e. ?search=b
2. Error Events
Based on the Error Message returned by the application, it may be possible to enumerate sensitive information. This is similar to user enumeration techniques.
Reference: https://t.co/2iIVT0xei2
3. Frame Counting
The window.length provides the number of frames in the window. This attribute can provide valuable information about a page to an attacker.
References: https://t.co/XjOZL3yiZF
3. Navigation Attacks
Reference: https://t.co/lS3LT80Foa
4. Cache Probing
- Workes based on detecting whether the web page was cached or not.
Ref: https://t.co/ejAdOHaIFG
5. ID Attribute
Ref: https://t.co/11lwLzE2DD
6. Post Message Broadcasts
a. Sharing Sensitive message with untrusted origins
b. Leaking information based on varying content or on the presence of a broadcast
7. Abusing Browser Features
- CORB (Cross-Origin Read Blocking)
- CORP (Cross-Origin Resource Policy)
8. Timing Attacks
- Clock Based
- Network Timing
- Execution Timing
- Hybrid Timing
- Connection Pool
# Referneces
1. https://t.co/byryqh3bql
2. https://t.co/khunvHYDga
3. https://t.co/ssQ39okO55
I'll revisit this attack in near future & will try to find.
More from For later read
The common understanding of propaganda is that it is intended to brainwash the masses. Supposedly, people get exposed to the same message repeatedly and over time come to believe in whatever nonsense authoritarians want them to believe /1
And yet authoritarians often broadcast silly, unpersuasive propaganda.
Political scientist Haifeng Huang writes that the purpose of propaganda is not to brainwash people, but to instill fear in them /2
When people are bombarded with propaganda everywhere they look, they are reminded of the strength of the regime.
The vast amount of resources authoritarians spend to display their message in every corner of the public square is a costly demonstration of their power /3
In fact, the overt silliness of authoritarian propaganda is part of the point. Propaganda is designed to be silly so that people can instantly recognize it when they see it
Propaganda is intended to instill fear in people, not brainwash them.
The message is: You might not believe in pro-regime values or attitudes. But we will make sure you are too frightened to do anything about it.
And yet authoritarians often broadcast silly, unpersuasive propaganda.
Political scientist Haifeng Huang writes that the purpose of propaganda is not to brainwash people, but to instill fear in them /2
"propaganda is often not used for indoctrination, but rather to signal the government\u2019s strength in being able to afford significant resources and impose on its citizens...not meant to 'brainwash', but rather to forewarn the society about how strong it is" https://t.co/mFAurhEHeO pic.twitter.com/WXKKJaPqWQ
— Rob Henderson (@robkhenderson) June 18, 2020
When people are bombarded with propaganda everywhere they look, they are reminded of the strength of the regime.
The vast amount of resources authoritarians spend to display their message in every corner of the public square is a costly demonstration of their power /3
In fact, the overt silliness of authoritarian propaganda is part of the point. Propaganda is designed to be silly so that people can instantly recognize it when they see it
Authoritarians do not use propaganda for brainwashing, "but to demonstrate their strength in social control...propaganda may need to be dull and unpersuasive, to make sure citizens know it is propaganda when they see it and hence get the implicit message" https://t.co/PqRpxjaIPL pic.twitter.com/1y67d2RCjB
— Rob Henderson (@robkhenderson) June 19, 2020
Propaganda is intended to instill fear in people, not brainwash them.
The message is: You might not believe in pro-regime values or attitudes. But we will make sure you are too frightened to do anything about it.
You May Also Like
H was always unseen in S2NL :)
Those who exited at 1500 needed money. They can always come back near 969. Those who exited at 230 also needed money. They can come back near 95.
Those who sold L @ 660 can always come back at 360. Those who sold S last week can be back @ 301
Those who exited at 1500 needed money. They can always come back near 969. Those who exited at 230 also needed money. They can come back near 95.
Those who sold L @ 660 can always come back at 360. Those who sold S last week can be back @ 301
Sir, Log yahan.. 13 days patience nhi rakh sakte aur aap 2013 ki baat kar rahe ho. Even Aap Ready made portfolio banakar bhi de do to bhi wo 1 month me hi EXIT kar denge \U0001f602
— BhavinKhengarSuratGujarat (@IntradayWithBRK) September 19, 2021
Neuland 2700 se 1500 & Sequent 330 to 230 kya huwa.. 99% retailers/investors twitter par charcha n EXIT\U0001f602
