So funktioniert der HACKER-ANGRIFF mit den neuen ZIP DOMAINS

Introduction to Zip Domains

In this section, the speaker introduces zip domains and explains how hackers can use them for attacks.

What are Zip Domains?

• Zip domains are a new type of domain that can be purchased.

• They can be used for attacks by creating URLs with unusual parameters.

• The speaker gives an example of a funny error message from the domain "yourwife.zip".

How do Zip Domain Attacks Work?

• The speaker explains how URLs work and what they look like.

• He shows an example of a Google search URL with a parameter "q" for the search term.

• The speaker explains that the "@" symbol is used in classic login URLs to register usernames and passwords.

Using Zip Domains for Attacks

• The speaker demonstrates how to create a fake login URL using a zip domain.

• He shows how changing the username to another website, such as bing.com, tricks Google into thinking it's a login attempt.

• This attack works because Google interprets the URL as a username and password combination.

Security Measures Against Zip Domain Attacks

• The speaker explains that using slashes in usernames and passwords prevents this type of attack.

• He demonstrates how changing the order of the URL components can also prevent this attack.

Unicode and URLs

In this section, the speaker discusses how Unicode can be used in URLs to create different types of slashes. They demonstrate how using a different type of slash in a URL can change the destination of the link.

Different Types of Slashes

• The normal slash used in URLs has the Unicode code 002F.

• There are two other types of slashes per Unicode: the break line and division line.

• Using a different type of slash in a URL can change the destination of the link.

Zip Domains

• A zip domain is a subdomain that appears at the end of a URL, such as ".zip".

• By using a zip domain, it is possible to create fake links that appear legitimate but actually redirect to another website.

• The correct link for downloading Kubernetes is "github.com/kubernetes/kubernetes/archive/refs/tags/v1.27.1.zip".

Subdomains

• Subdomains can be added to any URL by placing them at the front, before the main domain name.

• The number of subdomains that can be added is unlimited, but what's important is that everything else on the server is at the front.

Teaching Normal People to Identify Phishing Links

In this section, the speaker discusses the difficulty of teaching people how to identify phishing links and suggests that it is nearly impossible for normal people to do so.

Identifying Phishing Links

• It is difficult to teach normal people how to identify phishing links.

• People cannot tell whether a link is legitimate or not just by looking at it.

• Even checking whether a link contains a division slash does not guarantee its legitimacy.

The speaker expresses frustration with the difficulty of teaching people how to identify phishing links and suggests that it may be impossible for normal people to do so.