Friday, April 6, 2012

Fun with data: URLs

›
Data URLs , especially in their base64 encoding can often be used for anti XSS filter bypasses . This gets even more important in Firefo...
5 comments:
Tuesday, March 27, 2012

Chrome addons hacking: Bye Bye AdBlock filters!

›
Continuing the Chrome extension hacking (see part 1 and 2 ), this time I'd like to draw you attention to the oh-so-popular AdBlock...
37 comments:
Tuesday, February 21, 2012

Chrome addons hacking: want XSS on google.com?

›
For a few days now I'm checking various Chrome extensions code looking for vulnerabilities (see also the first post of the series ). Th...
6 comments:
Friday, February 17, 2012

Intro to Chrome addons hacking: fingerprinting

›
tldr;   Webpages can sometimes interact with Chrome addons and that might be dangerous, more on that later. Meanwhile, a warmup - trick to ...
15 comments:
Wednesday, January 18, 2012

Cursorjacking again

›
About a year ago, Marcus Niemietz demonstrated UI redressing technique called cursorjacking . It deceived users by using a custom cursor ...
4 comments:
Saturday, December 17, 2011

Beatthis! oracle crypto xmas challenge

›
It's this time of the year, and I'm sitting here and launching  Beathis oracle! crypto xmas challenge  for you guys. Enjoy! It'...
Tuesday, November 22, 2011

Geocommons.com admin account hijack

›
Potato chips, post-it notes, LSD and Viagra - all these things were discovered by accident. As it seems, sometimes great discoveries come ...