+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+---- Forum: Requests (https://sinister.ly/Forum-Requests--826)
+---- Thread: What are the actual dangers of clicking on links? (/Thread-What-are-the-actual-dangers-of-clicking-on-links)
What are the actual dangers of clicking on links? - XIan - 08-06-2019
Hey guys, I've always heard the age old "don't click on links in emails" and can understand the dangers in doing so to some extent but Im wondering what the major downfalls could be, if someone had malicious enough intent?
So far, I understand most malicious emails sent to schools / businesses are phishing, and simply clicking on that won't do terribly much unless the user physically enters information in. Now, what else? We could have XSS, CSRF, DNS Rebinding, etc. but most of these are being mitigated by browsers themselves. What else can happen if you were to click a malicious link nowadays?
Thanks guys!
RE: What are the actual dangers of clicking on links? - Cr3aTor - 08-06-2019
(08-06-2019, 05:20 PM)XIan Wrote: So far, I understand most malicious emails sent to schools / businesses are phishing, and simply clicking on that won't do terribly much unless the user physically enters information in. Now, what else?While this is true, there have been in the past malicious users who where able to download and even run the malicious file.
(08-06-2019, 05:20 PM)XIan Wrote: We could have XSS, CSRF, DNS Rebinding, etc. but most of these are being mitigated by browsers themselves.I won't argue that there are mitigations against these kind of attacks implemented in the browsers, but again it only takes a single mistake to be made by the teams who develop such mitigations for an attacker to find a bypass to it. Therefore we've seen a lot of examples in the past of such mechanisms. After all it's a cat and mouse game.
(08-06-2019, 05:20 PM)XIan Wrote: What else can happen if you were to click a malicious link nowadays?I will not take in consideration any 0-day vulnerability in here, but a malicious user could pretty easily gain a lot of information about your machine, redirect you to carefully crafted phishing websites and deceive you, run javascript of any shape, thus can see what other tabs you have opened, etc.
There are a lot of things you can do just by deceiving a user to enter your website and it's a subject with a pretty big amplitude if you ask me. After all the only limitation is the persistence, experience and the creativity of the attacker.
RE: What are the actual dangers of clicking on links? - darkninja1980 - 08-07-2019
Well, I can say only download a file from someone that you trust.
RE: What are the actual dangers of clicking on links? - mothered - 08-07-2019
Quote:We could have XSS, CSRF, DNS Rebinding, etcYou've answered your own question.
Quote:but most of these are being mitigated by browsers themselves.Do not expect browsers, AVs, IDS/IPS and the like, to take care of such threats In It's entirety.
They cannot possibly account for every malicious entity online.
RE: What are the actual dangers of clicking on links? - XIan - 08-10-2019
(08-07-2019, 05:58 AM)mothered Wrote:Quote:We could have XSS, CSRF, DNS Rebinding, etcYou've answered your own question.
Quote:but most of these are being mitigated by browsers themselves.Do not expect browsers, AVs, IDS/IPS and the like, to take care of such threats In It's entirety.
They cannot possibly account for every malicious entity online.
True, I just didn't know if there were any larger things that I was missing out on that people are vulnerable to. Also, I didn't know the full scope of mitigation by browsers so I appreciate you putting it into perspective for me! Thanks
RE: What are the actual dangers of clicking on links? - bender - 10-09-2019
Several types of dangers hidden file trojan virus .exe link that retrieves your ip or information about your location
RE: What are the actual dangers of clicking on links? - Duo Duo - 10-23-2019
(08-06-2019, 05:20 PM)XIan Wrote: Hey guys, I've always heard the age old "don't click on links in emails" and can understand the dangers in doing so to some extent but Im wondering what the major downfalls could be, if someone had malicious enough intent?西安的？同一座城市
So far, I understand most malicious emails sent to schools / businesses are phishing, and simply clicking on that won't do terribly much unless the user physically enters information in. Now, what else? We could have XSS, CSRF, DNS Rebinding, etc. but most of these are being mitigated by browsers themselves. What else can happen if you were to click a malicious link nowadays?
Thanks guys!
RE: What are the actual dangers of clicking on links? - taylostolo - 10-23-2019
(08-06-2019, 05:20 PM)XIan Wrote: Hey guys, I've always heard the age old "don't click on links in emails" and can understand the dangers in doing so to some extent but Im wondering what the major downfalls could be, if someone had malicious enough intent?Want me to show you i have wanted to blow up someones computer recently
So far, I understand most malicious emails sent to schools / businesses are phishing, and simply clicking on that won't do terribly much unless the user physically enters information in. Now, what else? We could have XSS, CSRF, DNS Rebinding, etc. but most of these are being mitigated by browsers themselves. What else can happen if you were to click a malicious link nowadays?
Thanks guys!
