businessinfo.co.uk

thespanner.co.uk

HTML scriptless attacks

http://www.thespanner.co.uk/2011/12/21/html-scriptless-attacks

Javascript blog with messed up syntax inside. Wednesday, 21 December 2011. Following up on @lcamtuf’s. Post about a “post xss” world. I thought I’d chip in with some vectors he missed. The textarea consumption technique he mentioned isn’t new and wasn’t invented by “Eric Y. Chen, Sergey Gorbaty, Astha Singhal, and Colin Jackson.” it was openly discussed on sla.ckers for many years (as usual) but anyway lets discuss vectors. Button as a scriptless vector. Option as a scriptless vector. Another interesting...

securitythoughts.wordpress.com

Resources | Security Thoughts

https://securitythoughts.wordpress.com/resources

Here’s a list of links that I have found useful during my course of work. This is a work in progress. And will most likely stay so), as I will be updating it regularly. If you have any good resource links, please send them across so we can share it others. Steve Shead Dot Com – Penetration Testing Checklist. Introduction to ARP Poison Routing – Oxid.it(SWF). DarkOperator’s Meterpreter and Misc. Scripts. ZeroCold’s Meterpreter and Bash Scripts. PHPCharset Encoder / String Encrypter. Debugging an SEH 0-d.

pendle.net

Pendle.Net: Online Businesses

http://www.pendle.net/Links/business.htm

Make this my Homepage. Online Businesses in Pendle. We hope to provide a resource for those businesses that are online in Pendle here. Such things as how to get online, online marketing tips, web site usability, grant availability, etc. Meanwhile, check out on of our Internet News. Articles for information on such things as grants available for getting your business on the Internet to how to exploit e-commerce to the full. Click here for a Full Listing. Click here for a Full Listing. With logos) ( WARNING.

blog.kotowicz.net

XSSing with Shakespeare: Name-calling easyXDM

http://blog.kotowicz.net/2014/01/xssing-with-shakespeare-name-calling.html

The world. according to koto. On security, malware, cryptography, pentesting, javascript, php and whatnots. Monday, January 13, 2014. XSSing with Shakespeare: Name-calling easyXDM. Window.name, DOM XSS and abusing Objects used as containers. What's in a name? What's in a name? That which we call a rose. By any other name would smell as sweet". Romeo and Juliet, Act II, Scene 2). While Juliet probably was a pretty smart girl, this time she got it wrong. There is. Right - the cutest one is that eval(name).

blog.kotowicz.net

January 2014

http://blog.kotowicz.net/2014_01_01_archive.html

The world. according to koto. On security, malware, cryptography, pentesting, javascript, php and whatnots. Monday, January 13, 2014. XSSing with Shakespeare: Name-calling easyXDM. Window.name, DOM XSS and abusing Objects used as containers. Whats in a name? Whats in a name? That which we call a rose. By any other name would smell as sweet. Romeo and Juliet, Act II, Scene 2). While Juliet probably was a pretty smart girl, this time she got it wrong. There is. Is the shortest XSS payload loader so far:.

thespanner.co.uk

Detecting browsers javascript hacks

http://www.thespanner.co.uk/2009/01/29/detecting-browsers-javascript-hacks

Javascript blog with messed up syntax inside. Detecting browsers javascript hacks. Thursday, 29 January 2009. I enjoyed my last experiment to create tiny browser detection hacks, so I thought I’d try and do some more in other browsers. I’ve found these while testing Hackvertor and writing the inspection functions. The rules are simple if you want to post your own:-. 1 The variable assignment must be the abbreviation of the browser. E.g. FF, IE, Op, Saf, Chr. 3 Small and as fast as possible please. Was po...

hackvertor.co.uk

Hackvertor

https://hackvertor.co.uk/home

You are not logged in. You can still view everyone's public tags but you need to register to create tags and save urls. Convert this to hex then octal. Find table from col. Gen words from str. Onclick="Hackvertor.historyForward();" class="mainbtns" /. Onclick="Hackvertor.historyEnd();" class="mainbtns" /. You are not logged in. You can only base64 encode urls. If you click login you can save urls in a shorter format. Don't save, just base64?