right wing kiddies launch low level cyber 'attack' on Indymedia using simple HTML exploit. Originally seen on just NYC IMC, now the exploit has been published it is sweeping across dozens of other sites...
"RightWingExtremist was created on August 1st 2004. This is the third version of our website and we promise there were no liberals hurt in the creation of this website. Except Rev."
Indymedia Attacked! Print E-mail
Written by Elac
Saturday, 23 October 2004
Indymedia Arkansas Branch
Alot of avid IndyMedia goers went to their branch today expecting to see anti-american sentiment like usual but they were given a few beams of truth. First of all their indymedia site went to georgewbush.com and 3 other websites launched that sent them to scaryjohnkerry.com, stolenhonor.com, and rightwingextremist.net. Naturally they were pissed. How dare someone take away that anti-american sentiment that they cherish so much.
You IndyMedia lovers are hopeless so I'm not going to preach. I'm going to list the exploits and how to fix it since the imc admins seem to lack in skill.
Exploit - Code - Fix
Javascript Alert - alert("msg"); - strip tags
Embed SWF - - strip tags
Iframe - - strip tags
SQL Injection - [releasing soon]
Embeded javascript - [releasing soon]
These are not hardcore fucking exploits and they don't have to be. The fact that simple html tags can fuck the homepage up is not only hilarious but sad. Now to some of you guys that want to use these to mess with Indymedia or another collective running dadaIMC and don't know how to all you would do is throw that code in the author or title field. Simple redirects.
More exploits are coming guys.
<3
Sites Affected:
http://atlanta.indymedia.org
http://arkansas.indymedia.org/
http://baltimore.indymedia.org/
http://buffalo.indymedia.org/
http://chicago.indymedia.org
http://cvilleindymedia.org
http://dc.indymedia.org
http://houston.indymedia.org/
http://cleveland.indymedia.org/
http://hm.indymedia.org/
http://idaho.indymedia.org/
http://milwaukee.indymedia.org
http://michiganimc.org
http://nhindymedia.org/
http://newjersey.indymedia.org
http://www.ntimc.org/
http://www.phillyimc.org/
http://okimc.org
Indymedia Attacked! Print E-mail
Written by Elac
Saturday, 23 October 2004
Indymedia Arkansas Branch
Alot of avid IndyMedia goers went to their branch today expecting to see anti-american sentiment like usual but they were given a few beams of truth. First of all their indymedia site went to georgewbush.com and 3 other websites launched that sent them to scaryjohnkerry.com, stolenhonor.com, and rightwingextremist.net. Naturally they were pissed. How dare someone take away that anti-american sentiment that they cherish so much.
You IndyMedia lovers are hopeless so I'm not going to preach. I'm going to list the exploits and how to fix it since the imc admins seem to lack in skill.
Exploit - Code - Fix
Javascript Alert - alert("msg"); - strip tags
Embed SWF - - strip tags
Iframe - - strip tags
SQL Injection - [releasing soon]
Embeded javascript - [releasing soon]
These are not hardcore fucking exploits and they don't have to be. The fact that simple html tags can fuck the homepage up is not only hilarious but sad. Now to some of you guys that want to use these to mess with Indymedia or another collective running dadaIMC and don't know how to all you would do is throw that code in the author or title field. Simple redirects.
More exploits are coming guys.
<3
Sites Affected:
http://atlanta.indymedia.org http://arkansas.indymedia.org/ http://baltimore.indymedia.org/ http://buffalo.indymedia.org/ http://chicago.indymedia.org http://cvilleindymedia.org http://dc.indymedia.org http://houston.indymedia.org/ http://cleveland.indymedia.org/ http://hm.indymedia.org/ http://idaho.indymedia.org/ http://milwaukee.indymedia.org http://michiganimc.org http://nhindymedia.org/ http://newjersey.indymedia.org http://www.ntimc.org/ http://www.phillyimc.org/ http://okimc.org
Comments
Display the following 3 comments