A vulnerability in the website of the American National Security Agency (NSA), was discovered, according to EXCLUSIVE information, by the hacktivist group called “Greek Insane Society”.
The Greek Insane Society (GIS) continues to publish identified vulnerabilities that will be discussed. After the vulnerability identified in Taxisnet, which was published a while ago, the hacktivists decided to publish an XSS vulnerability identified in the well-known NSA, the US National Security Agency.
According to the anonymous sender of the message to the SecNews editorial team, the GIS hacktivists identified a Cross Site Scripting (XSS) (which had been identified by a foreign researcher previously). Similar vulnerabilities on the US National Security Agency website (mainly XSS) have been identified in the past on several occasions, and have been immediately fixed by the website's technicians.
The URL where the vulnerability appears on the US National Security Agency server, according to GIS, is the following [here] :
https://www.nsa.gov/applications/search/?q=1&dir=1+src%3D–%3E%22%3E%3Cimg+src%3Dlol+onerror%3Dalert%28%27nsa.gov-xssed-by-Greek-Insane-Society%27%29%3B%3E%27%3E%27%22
When executing the Web request, you receive the following message (which they sent us as proof of their claims):
SecNews has identified an XSS vulnerability on the website. As we have repeatedly emphasized, XSS attacks, by themselves, may not be particularly significant and do not pose an immediate risk to the website. However, on websites of a specific category (such as Banks, Search Engines, Systems with personal user data such as Taxisnet or Booking systems, etc.) where Phishing while simultaneously redirecting visitors to malicious destinations, they must be taken seriously and repaired immediately by those responsible.
SecNews thanks the “Greek Insane Society” for the timely and accurate information.
