Thursday, August 23, 2007

SHA-1 Collision Search Graz XSS and CSRF

›
A couple of days ago, at elhacker.net , they showed a project, for finding SHA-1 collisions. After I registered, I found out that there was ...
Monday, August 06, 2007

JavaScript is just evil (for you) [ Part I ]

›
This is the first of 3 parts of the document entitled: " JavaScript is just evil ". Here are the first 2 chapters. 1.- DoSing the ...

Morfi! the Human readable+HTML+JavaScript file all in one..

›
Here I present a file that will appear different depending on which application you open it. As plain text, it will describe how it works, a...
Saturday, August 04, 2007

Google teachs security basics

›
It's rather simple.. and it deals with vulns at the "server level" (no sqli, rfi, xss, etc..) anyway.. http://code.google.com/...
Sunday, July 29, 2007

DoSing Firefox with Error Consoles

›
3 days ago, I found out that there was a way of Popping up the Firefox JavaScript Error Console, by doing: <iframe src="javascript:...
Friday, July 27, 2007

Temporal Cache Poisoning (IExplorer and Firefox) = Feature?

›
While making estigma 's function EditHTML() (a WYSIWYG editor), I realized that the code modified, will stay on cache, until you close t...
Thursday, July 26, 2007

Playing with Google Wireless Transcoder

›
Last Week, I found Google Wireless Transcoder , and I started playing with it trying to find a XSS bug in the HTML "transcoder", a...
Saturday, July 07, 2007

Passing Variables by Reference in JavaScript

›
Long time ago, when I was learning C, and I understood the use of pointers, I started thinking if there was a way to pass the JavaScript var...