Posts

Showing posts from April, 2018

Netflix account takeover using Google Obscure email vulnerability

Image
 What is Obscure email vulnerability Obscure email vulnerability in Gmail is interaction between two different ways of handling e-mail addresses which means shaquibdexter@gmail.com would be same as shaquib.dexter@gmail.com and this is also same as dexters.h.a.q.u.i.b@gmail.com. But in case of netflix they don't ignore the dotted part so all of them are unique email address for netflix and each one can be used for registering a new account. So this difference can be exploited . The phishing part  Try the Netflix signup form until you get a gmail.com address which is already registered by some user, for example you find the victim shaquibdexter.   Create a Netflix account with address shaquib.dexter   Sign up for free trial with any card no (that card should be throwaway card).   When Netflix applies the active card check, cancel the card. Wait for Netflix to bill the cancelled card. Then Netflix

Improve your internet security by blocking malicious domains

Image
 What is this In this post i will show you how can you block all malware domain which host malicious code on their sites which can compromise your system or your browser by saving some bad cookies or malware on your computer, not only this it will also block ads and online tracking cookies. How do this works   This work by creating a host file by replacing your host file. This host file get a list of all those malicious domain name and will create a rule to block all those sites on your system. How does it block site They redirect all those domain to your local address that means all those blocked site in the list will redirect to 127.0.0.1 which is your own computer and your computer will never allowed to communicate to that address .  How to use this  Using this program is very easy just follow some easy steps below and you are good to go  STEP 1 .   Open your terminal and type git clone https://github.com/zant95/hBlock && cd hBlock