Ashish Pathak Sec

Acknowledged By Nokia (Hall Of Fame) With Poc

<div dir="ltr" style="text-align: left;" trbidi="on">
I Reported Html Injection Bug To Nokia They Accept My Report And Decided To Provide Me Hall Of Fame.<br />
<br />
<b>About Html Injection Content From Owasp:-</b>Hypertext Markup Language (HTML) injection, also sometimes referred to as <i>virtual defacement</i>,
 is an attack on a user made possible by an injection vulnerability in a
 web application. When an application does not properly handle user 
supplied data, an attacker can supply valid HTML, typically via a 
parameter value, and inject their own content into the page.<br />
<br />
This attack is typically used in conjunction with some form of 
social engineering, as the attack is exploiting a code-based 
vulnerability and a user's trust.<br />
<br />
<b>Hall of fame link:-  </b><a href="http://networks.nokia.com/responsible-disclosure">http://networks.nokia.com/responsible-disclosure</a><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibH3w7UpXvl-N9vwi66HSjMov2Ij0pPw97ipugZ8emuSDXF_inttpxyTpTGhibdJ9wBVNOn0SXs-Tp4-44eZWqqW6esJI2ahBIUVnV9Y_js4QF3qzNPhyphenhyphenueQhknZHQTiuPKrje5LFxzxRu/s1600/11167685_1381812635481978_4617930359809391424_n.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibH3w7UpXvl-N9vwi66HSjMov2Ij0pPw97ipugZ8emuSDXF_inttpxyTpTGhibdJ9wBVNOn0SXs-Tp4-44eZWqqW6esJI2ahBIUVnV9Y_js4QF3qzNPhyphenhyphenueQhknZHQTiuPKrje5LFxzxRu/s1600/11167685_1381812635481978_4617930359809391424_n.jpg" width="400" /> </a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<b>Nokia Html Injection Proof Of Concept Video Watch And Enjoy :D </b></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div style="text-align: center;">
<iframe allowfullscreen="" class="YOUTUBE-iframe-video" data-thumbnail-src="https://i.ytimg.com/vi/cAf0jGlVf5Y/0.jpg" frameborder="0" height="266" src="https://www.youtube.com/embed/cAf0jGlVf5Y?feature=player_embedded" width="320"></iframe></div>
<br />
If you have any question related to this post then please drop your comment in comment box. and if you like my post then please share it with your friends because sharing is caring. </div>

Acknowledged By Nokia (Hall Of Fame) With Poc

I Reported Html Injection Bug To Nokia They Accept My Report And Decided To Provide Me Hall Of Fame. About Html Injection Content From Ow...

Acknowledged By Google (Hall Of Fame)

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: left;">
I Reported Frame Limit Protection Bypass Bug To Google They Accept My Report And Decided To Provide Me Hall Of Fame.</div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
<b>What Is Frame Limit Protection:-</b>there is a protection regarding brute force and bots attacks is known as frame limit protection.</div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
For Example:- in a simple language when you attempt 50 -60 wrong passwords on a website after that you got errors likes ( try after sometime, reset password, login limit exceeds )these error shows that there is a frame limit protection.</div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
<b>Hall of fame link :-</b> <a href="http://www.google.com/about/appsecurity/hall-of-fame/archive">http://www.google.com/about/appsecurity/hall-of-fame/archive</a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh5ySjx14Md4UwQLo0F0ghu3YKAVcTPwOztbFwg_nQfCqA3mBX0l3acm9ITuBsV_HjU5byZn6tcZ9slKVmIxAQoA9F_cdLUHaY1_j6ECftBXvaoWHtZhtrIGLLDoN6EtegoxcThCZaZYK56/s1600/ffffffff.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh5ySjx14Md4UwQLo0F0ghu3YKAVcTPwOztbFwg_nQfCqA3mBX0l3acm9ITuBsV_HjU5byZn6tcZ9slKVmIxAQoA9F_cdLUHaY1_j6ECftBXvaoWHtZhtrIGLLDoN6EtegoxcThCZaZYK56/s1600/ffffffff.jpg" width="320" /></a></div>
<br /></div>