web application firewall bypass with a XSS attack
- Tuesday, June 1, 2010, 3:52
- Articles, Threat Research
In the following demo video, Sandro Gauci of EnableSecurity shows how an attacker can switch off dotDefender in order to bypass any “protection” offered by the WAF. Such attack is possible By exploiting a cross-site scripting vulnerability in the log viewer facility of the dotDefender admin interface. Watch the video below for a more in depth explanation of the attack. From the below video one can also learn and understand the importance of having secure web applications, especially if they are to be accessed by trusted administrators. As we’ve seen, while the administrator is doing his job (checking out the log files) a vulnerability is exploited and without knowing, he opens the doors for hackers!
The full advisory is available from the following URL;http://resources.enablesecurity.com/advisories/ES-20100601-dotdefender4.txt