XSS vulnerability penetration into Sina Weibo headlines account

I was surprised that Sina had to hire an XSS security engineer with a high salary, so I used the XSS vulnerability to test the account of Sina Weibo toutiao.com and launched a counterattack against XSS.

Using XSS to get cookies can directly control Weibo. toutiao news is still important and published in major global news.

 

The XSS penetration test process is similar to the following:

1. Find an XSS vulnerability in the Sina sub-station and use the Server Vulnerability of the sub-station to write an xss exploit. the test can be successful only when the other party clicks.
POC:
Http://tw.weibo.com/_common/jwplayer/player.swf? Debug = function () {alert (1 )}

2. Determine the test target, select headlines, and watch certification as a 24-hour broadcast of major global news.

3. As a result, the social worker sent headlines and provided news clues with XSS exploit url.
PS: the short URL is really helpful.

 

 

4. After the process is completed, the COOKIE is obtained for session hijacking to fully control the Weibo account.

 


 

Solution:

Fix XSS vulnerabilities in sub-stations.