[users@httpd] Spoofing URLs in the address bar

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: users@xxxxxxxxxxxxxxxx
Subject: [users@httpd] Spoofing URLs in the address bar
From: "gdwfkd@xxxxxxxxx" <gdwfkd@xxxxxxxxx>
Date: Wed, 15 Nov 2006 11:14:14 -0800
Delivered-to: apmail-httpd-users-archive@xxxxxxxxxxxxxx
Delivered-to: apmail-httpd-users-archive@xxxxxxxxxxxxxxxx
Delivered-to: mailing list users@xxxxxxxxxxxxxxxx
Mailing-list: contact users-help@xxxxxxxxxxxxxxxx; run by ezmlm
Reply-to: users@xxxxxxxxxxxxxxxx

Is it possible to display a different URL than the actual site that the browser is contacting in the address portion of a browser? I had thought the only options for the URL were either the actual site, or the proxy server site in the instance where you are using a proxy.

I'm asking this as a security question. If a user gets an email and clicks on a link (the HREF can say anything it wants), is it possible to have the browser show http://www.citibank.com in the address bar when it's really connected to some Chinese malware site?

I know that there are exploits out there for IE, but lets assume I've got fully patched IE or Firefox and that we don't have some bizarre DNS tainting or the like going on.

Follow-Ups:
- Re: [users@httpd] Spoofing URLs in the address bar
  - From: Joshua Slive

Prev by Date: [users@httpd] ApacheBench ... Send request failed!
Next by Date: Re: [users@httpd] Spoofing URLs in the address bar
Previous by thread: [users@httpd] ApacheBench ... Send request failed!
Next by thread: Re: [users@httpd] Spoofing URLs in the address bar
Index(es):
- Date
- Thread

[Index of Archives] [Open SSH Users] [Linux ACPI] [Linux Kernel] [Linux Laptop] [Kernel Newbies] [Security] [Netfilter] [Bugtraq] [Squid] [Yosemite News] [MIPS Linux] [ARM Linux] [Linux Security] [Linux RAID] [Samba] [Video 4 Linux] [Device Mapper]