URL redirection Vulnerability in Google

An open redirect is a vulnerability that exists when a script allows redirectionto an external site by directly calling a specific URL in an unfiltered,unmanaged fashion, which could be used to redirect victims to unintended,malicious web sites. A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect.

A similar vulnerability is reported in Google by "Ucha Gobejishvili ( longrifle0x )". This problem may assist an attacker to conduct phishing attacks, trojan distribution, spammers.

Url: https://accounts.google.com/o/oauth2/auth?redirect_uri=http://www.something.com

Same vulnerability in Facebook, Discovered by ZeRtOx from Devitel group:

http://www.facebook.com/l.php?h=5AQH8ROsPAQEOTSTw7sgoW1LhviRUBr6iFCcj4C8YmUcC8A&u=www.something.com

Impact of Vulnerability  :

• The user may be redirected to an untrusted page that contains malware which may then compromise the user's machine. This will expose the user to extensive risk and the user's interaction with the web server may also be compromised if the malware conducts keylogging or other attacks that steal credentials, personally identifiable information (PII), or other important data.
• The user may be subjected to phishing attacks by being redirected to an untrusted page. The phishing attack may point to an attacker controlled web page that appears to be a trusted web site. The phishers may then steal the user's credentials and then use these credentials to access the legitimate web site.

URL redirection Vulnerability in Google

An open redirect is a vulnerability that exists when a script allows redirectionto an external site by directly calling a specific URL in an unfiltered,unmanaged fashion, which could be used to redirect victims to unintended,malicious web sites. A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect.

A similar vulnerability is reported in Google by "Ucha Gobejishvili ( longrifle0x )". This problem may assist an attacker to conduct phishing attacks, trojan distribution, spammers.

Url: https://accounts.google.com/o/oauth2/auth?redirect_uri=http://www.something.com

Same vulnerability in Facebook, Discovered by ZeRtOx from Devitel group:

http://www.facebook.com/l.php?h=5AQH8ROsPAQEOTSTw7sgoW1LhviRUBr6iFCcj4C8YmUcC8A&u=www.something.com

Impact of Vulnerability  :

• The user may be redirected to an untrusted page that contains malware which may then compromise the user's machine. This will expose the user to extensive risk and the user's interaction with the web server may also be compromised if the malware conducts keylogging or other attacks that steal credentials, personally identifiable information (PII), or other important data.
• The user may be subjected to phishing attacks by being redirected to an untrusted page. The phishing attack may point to an attacker controlled web page that appears to be a trusted web site. The phishers may then steal the user's credentials and then use these credentials to access the legitimate web site.

How to like stories on your wall in facebook at one click

Do you know? you can like all stories on your wall at one click in facebook. I know its foolish to like all the stories without knowing what they are. But many people do it for fun. And i saw many people who really like all the stories which they see on the wall.

But assume how much time it will take to go on each story and like it. It will take time and effort. 

But I have a nice tool which can save your time and effort both. If you have Google chrome web browser, you can do it at a click. If you do not have Google chrome Browser, you can download it a click.

Now open Google chrome and click on the link below

http://www.chromeextensions.org/social-communications/facebook-like-all/

this is the Google chrome extension named as Like All. Install it in your browser.

Now go to your wall and click on the like button at the top rightof your browser.

Now you have liked all the stories at a click

:P

How to like stories on your wall in facebook at one click

Do you know? you can like all stories on your wall at one click in facebook. I know its foolish to like all the stories without knowing what they are. But many people do it for fun. And i saw many people who really like all the stories which they see on the wall.

But assume how much time it will take to go on each story and like it. It will take time and effort. 

But I have a nice tool which can save your time and effort both. If you have Google chrome web browser, you can do it at a click. If you do not have Google chrome Browser, you can download it a click.

Now open Google chrome and click on the link below

http://www.chromeextensions.org/social-communications/facebook-like-all/

this is the Google chrome extension named as Like All. Install it in your browser.

Now go to your wall and click on the like button at the top rightof your browser.

Now you have liked all the stories at a click

:P

Force Google Chrome to remember your passwords

If you want Google chrome to remember your password for each website you use daily, most of the times chrome asks for that. But in some cases it doesn't ask for save passwords. 
If you want your chrome to remember all passwords, you can choose an addon of chrome Autocomplete= on




Add this to your chrome
https://chrome.google.com/webstore/detail/ecpgkdflcnofdbbkiggklcfmgbnbabhh




You can also do this by given trick



you can also import all data stored in your firefox browser. So use firefox for login into all accounts you want to remember and save its data in firefox when it prompts, Then import all saved passwords in Chrome. Now use chrome and it will remember your all passwords

Force Google Chrome to remember your passwords

If you want Google chrome to remember your password for each website you use daily, most of the times chrome asks for that. But in some cases it doesn't ask for save passwords. 
If you want your chrome to remember all passwords, you can choose an addon of chrome Autocomplete= on




Add this to your chrome
https://chrome.google.com/webstore/detail/ecpgkdflcnofdbbkiggklcfmgbnbabhh




You can also do this by given trick



you can also import all data stored in your firefox browser. So use firefox for login into all accounts you want to remember and save its data in firefox when it prompts, Then import all saved passwords in Chrome. Now use chrome and it will remember your all passwords