Same Site Scripting Attack

-


How to Find & Reporting Same Site Scripting (SSS)

What is Same Site Scripting ?
A mistake, which seems harmless, is to leave off trailing dot at the end. Server parses configuration file in way that localhost is interpreted as hostname within the current domain, instead of domain in itself. What this means is that if you try to use ping command for localhost.target.com, query will resolve.

This introduces the vulnerability called Same Site Scripting, which is variant of Cross-Site Scripting (XSS). Since dot isn’t present at the end of URL, it indicates that record is not fully qualified. Thus, queries of form “localhost.target.com” are resolved

I believe you may be referring to "Same-Site Scripting" (not to be confused with Cross-Site Scripting, or XSS). However, it's worth noting that "Same-Site Scripting" is not a widely recognized term in the field of web security. If you can provide more context or clarify your question

How to Find ?

STEP #1: . Open any site and copy its domain name.


STEP #2: . Then open CMD and type this command (EX :- ping localhost.example.com) if reply comes then Same site scripting Vulnerability .


Impact : 
This may cause security issues in multiple user systems. An attack procedure can be found here
      "It's a common and sensible practice to install records of the form "localhost. IN A 127.0.0.1" into nameserver configurations, bizarrely however, administrators often mistakenly drop the trailing dot, introducing an interesting variation of Cross-Site Scripting (XSS) I call Same-Site Scripting. The missing dot indicates that the record is not fully qualified, and thus queries of the form "localhost.example.com" are resolved. While superficially this may appear to be harmless, it does in fact allow an attacker to cheat the RFC2109 (HTTP State Management Mechanism) same origin restrictions, and therefore hijack state management data."

Mitigation :
Non-FQ localhost entries be removed from nameserver configurations for domains that host websites that rely on HTTP state management.



                 How to Report Vulnerability ?
Hello Team
                 I'm Career Technology Cyber Security India  a white security researcher from Mumbai INDIA, founded a vulnerability on your website

Vulnerability Name: Same Site Scripting

Descriptions  :
I know that this may not be what you are looking for since you mention DNS, but IMHO, same-site scripting (SSS), by interpolation from the definition of XSS (cross-site scripting), is a class of attack whereby a malicious user injects javascript code on the HTML page of a website targeting the same domain.

Vulnerable URL: https://www.example.com/

Steps to Reproduce :
1.visit given URL
2.open CMD then type command i e: ping localhost.example.com 
3.Then you will get reply which is coming from DNS

Impact :
This may cause security issues in multiple user systems. An attack procedure can be found here

PoC
A screenshot has been attached 

Thanks & Regard,
Career Technology Cyber Security India 
Indian Bug Hunter

Comments

Post a Comment

Popular posts from this blog

Some Dark web Links

-
Image
Here are some of the Forum/Website to visit on dark web related to cybersecurity and hacking. Before visiting this website please follow the steps to be safe on the dark web/ Deepweb. Security Steps to be taken before opening the links: First of All, To browse these dark web forums, first close all active programs and applications in your computer then start Your NordVPN or any Paid and HQ VPN that have TOR service and select Onion Over VPN Server.  Now start Tor Browser and disable Javascript. In this way, you have created a completely secure and untraceable environment for you. If you think Tor Browser gives you full anonymity then you are wrong.  Only premium VPN services can provide you fully secure and untraceable environment. I have tried my hands on many premium VPN services, and I found NordVPN beats its competitor in all features. Disclaimer ⚠ : This info are shared for educational purpose only, neither the website nor creator hold any info or liabl...
Read more

How to join Cyber Cell or Cyber Crime Department in India || Exam or Direct or Skills???

-
Image
 How to join Cyber Cell or Cyber Crime Department in India || Exam or Direct or Skills??? Hello Guys, today's topic is How to join Cyber Cell in India. All of us has dreamed of joining the cybercrime department and working as an officer for the nation. Some of us have tried to search it on the internet asked our colleagues and friends relatives but somewhere we are not able to find the correct and satisfying answer o our question. Don't worry today Career Technology is going help you out to find all your questions answered in a single post. Welcome Everyone :)  Let's get started  HOW TO JOIN CYBER CELL THROUGH EXAM?? In the cyber cell department, there is no specific exam to join the cyber cell. Now What if there is no exam for cyber cell??? You can join cyber cell by applying for the exam of CBI or IB and then after getting selected for this you can apply for the cyber cell. HOW TO JOIN CBI OR IB?? Firstly you need to apply for this post to join cyber cell and to join C...
Read more

ATM HACKING TOOL TRENDING ON DARK WEB

-
Image
ATM HACKING TOOL TRENDING ON DARK WEB Latest hacking tools and devices have a great sale on the dark web, an ATM can be hacked within 15 to 20 minutes by any amateur person too. The one should know basics of it before buying such things, cybersecurity startup knowledge. The person who discovers this is CloudSEK Rakesh Krishnan says "The seller on the dark web has latyest ready-made tools such has malware cards, USB ATM Malware and many more such tools to dispense money from the ATM". HE also said that "Earlier, though these were slightly complicated, now with these devices, anybody can control these machines,” . WHAT HE DISCOVERED? HE talked to the seller as a buyer to many online shops and One of the shops offered him  ATM Malware Card, PIN Descriptor, Trigger Card and an instruction guide which tells how to suspend the cash from the machine. Once installed, it captures all card details stealthily. The amount can be withdrawn using Trigger Card, that d...
Read more