SecurityTube

Description: “The data URI scheme is a URI scheme (Uniform Resource Identifier scheme) that provides a way to include data in-line in web pages as if they were external resources. This technique allows normally separate elements such as images and style sheets to be fetched in a single HTTP request rather than multiple HTTP requests, which can be more efficient.” – Wikipedia

Data URI is having a specific format. We exploit a particular format of data URI for implementing phishing. Watch the video for detailed explanation and Demonstration of Data URI Phishing on facebook.

Tags: data uri , data uri phishing , phishing with data uri , uri phishing , data uri scheme exploiting , data uri hacking , new method of phishing , ajin abraham , kerala cyber force , www.keralacyberforce.in ,

Latest from the SecurityTube Blog:

Disclaimer: We are a infosec video aggregator and this video is linked from an external website. The original author may be different from the user re-posting/linking it here. Please do not assume the authors to be same without verifying.
Original Source: http://www.youtube.com/watch?v=Zlk76Oqw7Oo

Comments (3):

• pentest on Mon 08 Oct 2012
  
  Is it possible to hyperlink the entire base64 code, When ever the victim clicks onbase64 hyperlink will the victim redirected to the fake page..
• David on Mon 08 Oct 2012
  
  ^hyperlink the javascript which leads to the fake page. modify for redirection to make it seamless... somewhat...
• xboz on Sun 14 Oct 2012
  
  normal " hyperlinks dsn't works currently browsers will block them.. and due to this potential attack most url shortners won't support url shortning of base64 encoded data.

Login to post a comment