Monday, January 31, 2011

How to get SQL query contents from SQL injection flaw

›
The technique is listed as a contestant in  Top 10 Web Hacking Techniques of 2011  poll. Yesterday, I got some time to interact with an...
2 comments:
Monday, January 10, 2011

XSS-Track as a HTML5 WebSockets traffic sniffer

›
HTML5 WebSockets are really a great feature for current web development. They allow you to set up a bi-directional TCP connection between ...
Tuesday, December 28, 2010

"Hacking HTML5" training

›
If you'd like to know a little more about HTML5 & security, in January I will be giving a one-day training with Niebezpiecznik.pl e...
Thursday, December 16, 2010

Squid-imposter: Phishing websites forever with HTML5 offline cache

›
Recently I've been doing some HTML5 hacking and I encountered Imposter by Lavakumar Kuppan. It's a framework to perform browser phi...
1 comment:
Thursday, December 2, 2010

XSS-Track now steals your uploaded files with HTML5 power!

›
HTML5, broadly speaking (actually it's XMLHttpRequest Level 2 , not being part of HTML5 spec , but who cares?) has yet another neat feat...
Monday, November 22, 2010

XSS track got ninja stealth skills thanks to HTML5

›
XSS-Track , a point of concept project on how to track users through XSS vulnerability today got even better: now it can change URL in brows...
5 comments:
Saturday, November 6, 2010

XSS-Track: How to quietly track a whole website through single XSS

›
XSS is #1 threat in web application security. We all know it's pretty common, from time to time we encounter a website where a single i...
14 comments: