Discuz! HTTP host Header attacks in multiple versions

Discuz! HTTP host Header attacks in multiple versions

Http://www.bkjia.com/Article/201404/292132.html

Discuz! X3.2 is an example.

Take http://bbs.locojoy.com/as an example,

1. its ip address is

115.29.162.113

2. Add entries to hosts

115.29.162.113 www.evil.com

3. Access http://www.evil.com

Retrieve the password, enter the target email, and submit



4. The victim received an email.
 

Of course, it can be forged to be more confidential. Some mailbox systems can also work with XSS. In short, once the victim accesses this URL,

Uid and id are all intercepted



5. Game Over

Solution:

When the system is installed for the first time, obtain the HOST value and save it as a constant.