About Token Kidnapping Exp combat small mind-vulnerability warning-the black bar safety net

2008-11-27T00:00:00
ID MYHACK58:62200821228
Type myhack58
Reporter 佚名
Modified 2008-11-27T00:00:00

Description

  1. Is mainly for 0 to 3, 0 8, didn't get a chance during the installation. NET 2 0 0 0 on the test

  2. Affected is your ASP. NET code is based on Full Trust to run, if permissions than Full Trust, it will not be affected

  3. Combat can be a multi-script type: asp, aspx, php test, is actually to switch to a different user identity to perform.

  4. Currently, the success rate is still relatively high.