Several common Web software security tests

Some commonly used Web software, such as QQ, MSN, Gtalk, Thunderbird, and Foxmail, must send personal sensitive information to the server, have you noticed that this sensitive information is safe when it is sent to the server? Next, we will analyze Iris v4.07.1:

First open Iris, click "filters"-"Edit filters", and open "Edit Filter
In the Settings dialog box, or press Ctrl + E ". Go to the ports option and enter
110. Click "<-Insert" to define a filter port. Here port 110 is commonly used POP3 port, used to send and receive mail, commonly used should have: QQ-8000, MSN-1863, Gtalk-4170, if it is unclear, you can use hijackfree to analyze the corresponding port of the application. Define the filter Port

Keep other default values. Click "OK" and return to the homepage. Click the green triangle to start the test:

Open Foxmail to send and receive emails. At this time, you can see the progress in the iris status bar. The default value is to listen to 2000 packets. We can set it to a smaller value, the result is displayed only after the 2000 packets are fully monitored, which is relatively slow. Click the status bar of the blue progress, but restart the program.

After receiving the Foxmail email, you can see the captured package in Iris, and then click "decode" on the left to decode it. Obviously, Foxmail sends logon information in plain text, which is really disappointing:

The other test principles are the same. We can find that only Foxmail's logon information is sent in plaintext, and QQ, MSN, Gtalk, and Thunderbird are encrypted. In addition, these im tools are not encrypted when sending messages during chatting. QQ can be set to encrypted transmission (the default value is plain text ). Of course, for a large part of people (including me), it doesn't matter if the chat is not encrypted. When do you want to talk to others about holidays or things like bubble bubbles, join in the fun.

Here is an article about Foxmail security risks. If you use Foxmail every day, you should pay more attention to it.

Some friends like Gmail very much, because it is targeted at goooogle, and it is very large, but Foxmail cannot receive Gmail, simply accessing the web page to receive it, it seems that it is back to the era before sending and receiving the client, clumsy and slow! In fact, Thunderbird can be used to send and receive Gmail, and it is much more secure than Foxmail ~