Remember to delete (or eat) cookies regularly !!!

Correcaminos said:
Not possible without downloading anything. Despite OP's good intention in sharing this advice, FBI is a poorly reliable agency, based on its history it's hard to believe in anything they say. It seems they are trying to spread lies with this idea of visiting a website and get instantly infected without downloading anything, imagine if it was real, just use ads and infect thousands of people per day just by getting traffic. Woudln't it be quite profitable for them? Just run some pop ads and boom, millions of cookies stolen by visiting a website without any interaction from the user.
Click to expand...
Exactly, yes. That FBI statement instantly made me raise my eyebrow. I can imagine it was written by non-technical person and meant for generic public as in idea of if they wont land on malicious sites then the next steps of downloading something bad wont happen. like "don't walk bad areas at night to not get mugged" even this isn't fully correct as there should be another user input on street to trigger the criminal activity to match the idea of visiting bad websites
 
Advertise on BHW
Looks like I'm going to have to clean up the contents of my browser
 
lucky.sparks said:
My question? Yes, I mean it seriously. Yes, perhaps I misunderstood something here. Can you give only 1 example?
Click to expand...
Sure, if you ask - ofc. i can give you one example:
Cross site scripting / xss exploit, could be one way: injected java script in any search bar or comment section.
This script could potentially access the cookies, without even pro-activly doing anything - just load the page.
And no download is needed for that & "HTTPS" or "HTTP" only is not the solution to prevent xss exploits.

I don't need to go further in detail, its a common method - can be googled easily and is well known.
Injection can also happen in Ads, without any download or something.
These Remember Me cookies are an example of how easy it is to grab the cookies since most of the users store their sessions to easily log in.
And the FBI is warning (again), because this is something that happens too often, its not something you recognize.

"No Script" is a nice Browser extension, can be configured for each website you visit.

I hope that answers your question, I will not go further into this topic, since this is the wrong place.

Correcaminos said:
Despite OP's good intention in sharing this advice
Click to expand...
Appreciated

Best regards,
zotix
 
zotix said:
Sure, if you ask - ofc. i can give you one example:
Cross site scripting / xss exploit, could be one way: injected java script in any search bar or comment section.
This script could potentially access the cookies, without even pro-activly doing anything - just load the page.
And no download is needed for that & "HTTPS" or "HTTP" only is not the solution to prevent xss exploits.
Click to expand...
year 2008 just called and is asking your hacking methods back

zotix said:
I don't need to go further in detail, its a common method - can be googled easily and is well known.
Click to expand...
you clearly don't and please stop sharing nonsense.

zotix said:
Injection can also happen in Ads, without any download or something.
Click to expand...
No it cant.

zotix said:
I hope that answers your question, I will not go further into this topic, since this is the wrong place.
Click to expand...
You wont not because its not the right place but simply because you cant.
 
465717858_967913408701000_4600051301270961290_n.jpg
 
Great info; I’ll definitely check it out. Do you have any more links where I can read about it?
 
zotix said:
Sure, if you ask - ofc. i can give you one example:
Cross site scripting / xss exploit, could be one way: injected java script in any search bar or comment section.
This script could potentially access the cookies, without even pro-activly doing anything - just load the page.
And no download is needed for that & "HTTPS" or "HTTP" only is not the solution to prevent xss exploits.

I don't need to go further in detail, its a common method - can be googled easily and is well known.
Injection can also happen in Ads, without any download or something.
These Remember Me cookies are an example of how easy it is to grab the cookies since most of the users store their sessions to easily log in.
And the FBI is warning (again), because this is something that happens too often, its not something you recognize.

"No Script" is a nice Browser extension, can be configured for each website you visit.

I hope that answers your question, I will not go further into this topic, since this is the wrong place.


Appreciated

Best regards,
zotix
Click to expand...
httponly cookies cannot be grabbed even if you could inject some javascript code in some web page. This is why sensitive data should not be kept inside local storage or a js cookie.
 
lucky.sparks said:
year 2008 just called and is asking your hacking methods back


you clearly don't and please stop sharing nonsense.


No it cant.


You wont not because its not the right place but simply because you cant.
Click to expand...
If you have your opinion, and have the knowledge - fair enough, but answer appropriately
 
the best part of the cookies is not typing the information over and over again : :weep: everything to stay safe and avoid getting hacked :anyway:
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top