Anonymizing RFI Attacks Through Google

Google can be utilized to hack into websites - actively exploiting them (not information gathering by the use of “Google hacking”, although that is how most of the sites vulnerable to RFI attacks are found).

By placing a URL on any web page, Google will find it, visit it and then index it. With this mechanism, it is possible to anonymize attacks on third party web sites through Google by the use of its crawler. SecuriTeam Blogs » Anonymizing RFI Attacks Through Google

Linked by shanmuga Saturday, 25th November 2006 1:19AM