Why My Website Sells Viagra
•Als PPT, PDF herunterladen•
5 gefällt mir•7,093 views
WordPress End-User Security - WordCamp Atlanta - Dre Armeda, CISSP
![DRE ARMEDA,CISSP @ DREMEDA ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],SUCURI .NET DRE .IM](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Empfohlen
Empfohlen
Weitere ähnliche Inhalte
Kürzlich hochgeladen
Kürzlich hochgeladen (20)
Empfohlen
Empfohlen (20)
Why My Website Sells Viagra
- 10. ITS NOT ALL PEACHY
- 17. ENCODED JAVASCRIPT Impact: Website pages may be used to serve malicious downloads to visitors. Downloads may be used to infect desktop computers, and/or exploit FTP info. Typical Entry Point: Outdated, known vulnerable software; exploited desktop computers; exploited FTP credentials. JavaScript that is obfuscated(hidden) so that you can’t tell what it is. It is injected into files/pages on the site and used to serve malware.
- 18. ENCODED JAVASCRIPT /wp-admin/js/cat.js – CLEAN
- 19. ENCODED JAVASCRIPT /wp-admin/js/cat.js – INFECTED
- 20. ENCODED JAVASCRIPT /wp-admin/js/cat.js – INFECTION DECODED – Somewhat
- 23. CONDITIONAL REDIRECTS Impact: When traffic is coming from a specific referrer (i.e. Google, Bing), the site is redirected to a malicious website. Typical Entry Point: Outdated, known vulnerable software. An attack the causes a website to redirect to a malicious website based on referrer, web browser, operating system.
- 24. CONDITIONAL REDIRECTS Infected .htaccess file:
- 25. CONDITIONAL REDIRECTS Result of conditional redirect:
- 28. PHARMA HACK Impact: Website page and post titles, descriptions and links are changed to display pharmaceutical ads and links back to malicious websites on search engine result pages. Typical Entry Point: Outdated, known vulnerable software. Pharma Hack is a type of SEO poisoning. Attackers manipulate their search engine results to make their links appear higher than legitimate results.
- 29. PHARMA HACK Results of scanning rendered source.:
- 30. PHARMA HACK Google Search Engine Results:
- 34. WHAT IS SECURITY? PROTECTING THINGS OF VALUE FROM HARM’S WAY.
- 35. HOW & WHY
- 36. AM I SECURE The percentage of risk can never be 0! The name of the game is minimizing risk.
Hinweis der Redaktion
- Why My Website Sells Viagra – Don’t Become A Pharmaceutical Marketplace
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- To edit the smart art: click on it the graphic, you will see a panel to the left where you can add or remove elements. If you do not see the panel open, click on the 2 arrows along the left border of the smart art (this will expand the panel). To change the image: Select the image then right click and select “Format Picture”. Select the “Fill” option, and select a file to replace the image.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- Click in the text boxes to edit their content.
- To change the phone image: There are 2 grouped images, a transparent phone on top of an image. Select the phone, select the top image and (using your arrow keys) move it over to the left to show the bottom image. Then right click the bottom image and select “Format Picture”. Select the “Fill” option, and select a file to replace the image. Move the phone back into it’s original position.