Randy Charles Morin blogs for the sake of blogging.
|
|
OK, I figured out how Jason h4x0red my blog. It's actually pretty easy and would work on any blog that supports RSS and MetaWeblogAPI, but there's no reason why this technique couldn't be ported to blogs that support other syndication and publishing technologies. Basically, Jason took advantage of an RSS unchecked buffer problem to post to my blog using MetaWeblogAPI. You can do the same by simply finding out what IP address a subscriber of yours is using and stuffing the buffer overflow code into your own RSS feed. When the subscribers native RSS reader polls your feed, the buffer overflow code causes blog entries to be posted on his blog. I'm not going to give specific samples because I don't want people exploiting this problem, which exist on any desktop with Firefox, IE7 or other native RSS reader. But, what I will do is cause the following code to be posted on several blogs across the blogosphere as proof that the technique works.
This blog h4x0red using Host Overflow Application eXception.
<img src="http://www.fashionhause.com/images/large/denimneospeedy_LRG.jpg">
Details are coming soon Actual size: 11.7''x12.7''x5.1''
Please check out our website:
http://www.fashionhause.com There are many top quality of replica handbags for sell
with perfect weight, feel, and like the originals.or email us : info@fashionhause.com