Friday , November 17 2017
Home / Vulnerability / Vulnerability eBay Memungkinkan Hacker Retas Akun Dalam 1 Menit

Vulnerability eBay Memungkinkan Hacker Retas Akun Dalam 1 Menit


Seorang peneliti keamanan Mesir Yasser H. Ali mengumumkan pada the hacker news tentang vulnerability yang terdapat pada situs eBay yang memungkinkan penyerang dapat membajak jutaan akun, Vulnerability yang Yasser temukan memungkinkan anda untuk meresest password dari akun pengguna eBay tanpa interaksi yang diperlukan selain dari email/ID dan username dari korban yang akan diretas.

Pada dasarnya untuk memulihkan password yang lupa, Pertama-tama pengguna harus diarahkan ke halaman reset password, di mana halaman pertama eBay menghasilkan nilai random code sebagai parameter HTML dari reqinput”, yang dapat dilihat oleh penyerang menggunakan inspect element tool pada browser.

Setelah pengguna memberikannya id email dan menekan tombol submit, eBay menghasilkan sebuah random code kedua, yang tidak diketahui oleh orang lain kecuali pengguna sendiri, dan mengirim kode bersama dengan link reset password untuk pengguna eBay ke alamat email yang terdaftar.

Setelah pengguna mengklik pada link reset password yang diberikan dalam email, pengguna akan diarahkan ke halaman eBay dengan password pilihan set baru, di mana pengguna hanya perlu memasukkan password baru dua kali dan harus mengirimkannya, untuk me-reset-nya eBay sandi account.

Yasser melihat bahwa menggunakan kode rahasia, permintaan sandi HTTP yang baru mengirimkan masing-masing reqinputnilai yang sama seperti yang telah dihasilkan dalam permintaan pertama, yaitu ketika pengguna mengklik reset password dan yang diketahui penyerang.

hacking ebay

hacking ebay

Perusahaan telah melakukan patch vulnerability ini setelah Yasser mengungkapkannya kepada tim keamanan eBay.

14 comments

  1. It’s really a great and useful piece of info. I’m happy that you just shared this helpful information with us. Please stay us informed like this. Thanks for sharing.

  2. hi I love your website, please come visit my site. Alex Morfi

  3. Your internet site is very slow because of open

  4. Hrmm that i has weird, my comment got eaten. Anyway I want to the way to point out that thiss nice ways to recognize that another person also mentioned this while i had trouble locating the same info elsewhere. This is originally that told me the answer. Thanks.

  5. Apple now has Rhapsody as an app, which is a great start, but it is currently hampered by the inability to store locally on your iPod, and has a dismal 64kbps bit rate. If this changes, then it will somewhat negate this advantage for the Zune, but the 10 songs per month will still be a big plus in Zune Pass’ favor.

  6. I have noticed that wise real estate agents everywhere are warming up to FSBO Marketing. They are realizing that it’s more than simply placing a poster in the front property. It’s really regarding building human relationships with these vendors who later will become consumers. So, once you give your time and effort to encouraging these retailers go it alone the “Law regarding Reciprocity” kicks in. Good blog post.

  7. I simply want to say I’m very new to blogs and absolutely liked you’re web page. More than likely I’m going to bookmark your blog post . You absolutely come with good article content. Thanks for sharing your web site.

  8. Incredible, would be to great small bit of post which I have encounter operating in considerable while. Perform also look at all my page.

  9. I am always looking online for ideas that can help me. Thx!

  10. Hi retasnews.in admin have you wondered what’s the secret how big company websites get massive targeted traffic and exposure in Google 1st page results for the biggest and toughest keywords?
    Answer is simple links, but only quality links which counts as votes for your site giving Google no choice but to shoot your site rankings to #1 results so your customers can see your site at the top of Google search results. Today is your lucky day because I’m going to reveal you secret resource of best of the best links from 500’000 website network! Yes that’s correct not some tiny 500 site network but half a million.
    *Links from real established, authority English actual PR pages with low outbound links max 10
    * Skyrocket your website rankings for your website related keyword and get massive laser targeted traffic, customers and $$$ in your bank account. Forget about thousands of crap directory and forum links which will do nothing bust just hurt your website rankings. Get the real deal at next-gen-traffic[dot]net Yes that’s the future of link building
    After my site is now at #1 position in Google I think next-gen-traffic[dot]net is the game changer in seo world!
    Your friend Jessica.

  11. 967848 59464Wow ~ Very good stuff ~ Come and look at MY ?? 390023

  12. Hi there would you mind stating which blog platform you’re working
    with? I’m planning to start my own blog in the near future but I’m having a
    tough time deciding between BlogEngine/Wordpress/B2evolution and Drupal.
    The reason I ask is because your design and style seems different then most blogs and I’m looking for something completely
    unique. P.S My apologies for getting off-topic but I had to ask!

  13. property for sale and to rent London Battersea and sw8

  14. My dream would not be just just one place. Just having the money and ability to travel and see it all.

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You might also likeclose
Free WordPress Themes - Download High-quality Templates