Showing posts with label facebook. Show all posts
Showing posts with label facebook. Show all posts
Friday, August 17, 2012

How Facebook lacked X-Frame-Options and what I did with it

›
In September 2011 I've discovered a vulnerability that allows attacker to partially take control over victim's Facebook account . V...
11 comments:
Thursday, March 17, 2011

Who's behind Facebook clickjacking scams?

›
Clickjacking is a pretty advanced technique even for security-minded programmers. I guess most of pentesters would have a hard time quickly...
Monday, October 18, 2010

Dont-Text.info / FightingGuy.info facebook worm - full analysis

›
Today another Facebook worm utilising clickjacking attack is spreading - as for now it has infected around 7000 profiles (yes, we do have th...
32 comments:
Tuesday, October 5, 2010

Serious security flaws in Facebook revealed today

›
Today some XSS & CSRF vulnerabilites in Facebook discovered by John Jean have been reported. These are already patched, so it's jus...
1 comment:
Tuesday, September 21, 2010

"The Hottest girls on Facebook" everonia.com malware analysis

›
Another worm spreading with clickjacking technique is now active, targetting Facebook users. If your FB friends display something similar t...
1 comment:
Monday, August 30, 2010

MakeMeLaughNow - analysis of new generation facebook worm

›
A new facebook worm malware application ' makemelaughnow ' is out in the wild. It escapes FB sandbox mechanisms and activates BEFOR...
3 comments:
Wednesday, December 23, 2009

5 ways to prevent clickjacking on your website (and why they suck)

›
Clickjacking attack is a very nasty attack. The most common form of it is when an attacker creates a webpage and tricks the visitor to clic...
2 comments:
Monday, December 21, 2009

New Facebook clickjacking attack in the wild - fb.59.to

›
There's a malicious website set up at http://fb.59.to that tries to trick users into a clickjacking attack that shares the link on vic...
9 comments: