[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-disclosure] Web Security and Bookmarklet Exploits
- To: full-disclosure@xxxxxxxxxxxxxxxxx, "WASC Forum" <websecurity@xxxxxxxxxxxxx>, "webappsec @OWASP" <webappsec@xxxxxxxxxxxxxxx>
- Subject: [Full-disclosure] Web Security and Bookmarklet Exploits
- From: "pdp (architect)" <pdp.gnucitizen@xxxxxxxxxxxxxx>
- Date: Sun, 18 Mar 2007 08:58:20 +0000
http://www.gnucitizen.org/blog/sex-candies-and-bookmarklet-exploits
http://www.gnucitizen.org/projects/technika/
I have rolled out a new Technika browser extension. It is very small
and extremely fast. Technika also integrates with Firebug, so you can
easily test and compose Bookmarklets on the fly. The article that I
pointed above discusses how Bookmarklets can be used to compose web
app exploits. There is a framework similar to metasploit that will
come out very soon. I thought that it might be a good idea to share
these ideas now, so the community knows what to expect in the future.
Thanks.
--
pdp (architect) | petko d. petkov
http://www.gnucitizen.org
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/