BarackObama.com Hacked!!!!

[Greyhatter]

Re: BarackObama.com Hacked!!!!

I love the way this guy thinks he isn't hacking(note Chinese hackers this is the way you are suppose to do it) :-).

xor

lol, yep!

PCMag.com

Monday April 21, 2008
A Hack We Can Believe In:

http://blogs.pcmag.com/securitywatch...believe_in.php

[astcell]

Re: BarackObama.com Hacked!!!!

Depends on who gets elected.

[xor]

Re: BarackObama.com Hacked!!!!

Hillary Clinton's website was also found to be vulnerable to the same exploit.

I guess both need some help in the IT Department.

Post from xss:
I am the one who "hacked" Obamas site.
By Mox from Liverpool, IL - Apr 20th, 2008 at 11:59 pm EDT

First, let me explain why I put hacked in quotation marks. It is because what I did was not hacking in the sense that I burrowed into some dusty served and changed the Obama site and stole all your credit card numbers. All I did was exploit some poorly written HTML code.

So, you may be wondering, I never saw this hacking! Well, apparently someone videotaped it. http://youtube.com/watch?v=NKjomr1Afq0. You may also be wondering, how did you get Hillary's site to appear where Obama's should be. The answer to that is, through the magical world of Cross Site Scripting. http://en.wikipedia.org/wiki/Cross-site_scripting.

You might be wondering, how did you get xss to work here? First, go to your manage blog tab. Then go to Edit Settings. You see how you can put anything you want as a blog URL? Well, its fixed now, but before you could put in any characters you wanted. Including >, ", and

I love the way this guy thinks he isn't hacking(note Chinese hackers this is the way you are suppose to do it) :-). I want pictures of when the FBI and the Secret Service break into his house in full tactical gear with guns drawn.

How many people here think he will get busted?


xor

[theprez98]

Re: BarackObama.com Hacked!!!!

Hillary Clinton's website was also found to be vulnerable to the same exploit.

[xor]

Source PCMag.com

Monday April 21, 2008
A Hack We Can Believe In
Categories:

Hacking, News, Servers
Tags:

hack, politics, web sites, xss

Hackers redirected portions of the BarackObama.com web site to HillaryClinton.com, according to several reports.

It's amazing more of this sort of thing hasn't happened already, especially since web-based donations are more important than ever to the campaigns. Four years ago Security Watch reported on a phishing e-mail that asked for donations to the John Kerry campaign.

The Obama hack used a cross-site scripting flaw in the site to redirect users from Obama's Community Blogs section to HillaryClinton.com. XSS bugs are getting far more attention lately than they had been in the past, perhaps because they are so widespread. And since the answer to them is good programming practices rather than running some security product, they can be difficult to snuff out.



Nice one. Sorry Hill fan here.

xor