5 ms·
Devilish reverse proxy? It's easily detectable in JS, no? I doubt the attackers would be able to remove simple domain check from some obfuscated JS code inside
by megous 8y ago
Devilish reverse proxy? It's easily detectable in JS, no? I doubt the attackers would be able to remove simple domain check from some obfuscated JS code inside AirBnB fast enough, not to be detected and IP banned.
- ttsda 8y agoThey could access airbnb through something like the chrome dev tools protocol and feed the clean html to the client, with no JS (other than some click detection). Would probably have latency issues but would get around most checks.
- megous 8y agoNow that would be quite interesting. But it may be waaay harder to do, without introducing all kinds of user visible quirks. Have you seen something like that done to a JS heavy website?
- ttsda 8y agoI implemented a (very initial) proof of concept of it using visual studio's dev tools[1], although there are better implementations of it out there as far as I can tell. My implementation forwards over all of the HTML when a change happens, but it's possible to access only the stuff that changes, and monitor such changes using CDP DOM events. I haven't seen it done in phishing sites but I don't visit them too often, although it's certainly possible! The visible stuff would be mostly the latency between interaction and stuff happening on the page, especially with hovering. [1] https://gist.github.com/tiagoad/2a2305a9156dea0e425fd57332a951e8 https://gist.github.com/tiagoad/2a2305a9156dea0e425fd57332a9...
- megous 8y agoThank you.