4 ms·
If you or anybody can remember the source article, that sounds like an interesting read! Edit: found one with a quick search. https://nakedsecurity.sophos.com/
by andrewstuart2 6y ago
If you or anybody can remember the source article, that sounds like an interesting read!
Edit: found one with a quick search. https://nakedsecurity.sophos.com/2011/08/10/bh-2011-bit-squatting-dns-hijacking-without-exploitation/ https://nakedsecurity.sophos.com/2011/08/10/bh-2011-bit-squa...
And https://www.researchgate.net/publication/262273269_Bitsquatting_Exploiting_bit-flips_for_fun_or_profit https://www.researchgate.net/publication/262273269_Bitsquatt...
- garaetjjte 6y agoHere's original paper: http://media.blackhat.com/bh-us-11/Dinaburg/BH_US_11_Dinaburg_Bitsquatting_WP.pdf http://media.blackhat.com/bh-us-11/Dinaburg/BH_US_11_Dinabur... But I'm not entirely convinced that most of these requests weren't just typos. Though those requests with mismatched Host header surely were true bitflips.
- tyoma 6y agoThere was some follow up work as well: http://blog.dinaburg.org/2013/09/bitsquatting-at-defcon21-and-more.html http://blog.dinaburg.org/2013/09/bitsquatting-at-defcon21-an... And I am beyond certain they were not typos; the requests were for long URLs that no one would be typing by hand. A few were for services that humans never enter urls into (like the Windows crash reporter).
- fart32 6y agoAlso here: https://www.youtube.com/watch?v=gXY3jm34RFU https://www.youtube.com/watch?v=gXY3jm34RFU I can't find it right now, but I also saw someone doing this with some version of Google Now (or what it was back then) and serving different assets into it.