Skip to content

Monthly Archives December 2008

Hackvertor video demo

I’ve finally created a Hackvertor video demo, I’ve encoded it in swf and compressed it quite a lot. The quality is good and at a high resolution but the colours are a bit out other than that it should be quite clear how it works. The demo is available here:-
Hackvertor video demo

Posted 18 December 2008 † Gareth Heyes § Security § hackvertor § javascript § php ‡ Comments (3)

Location based XSS attacks

The basic attack
Using the hash portion of the location is a good way to beat filters, anything sent via the hash is not sent to the server in question. We can use a large amount of data which is hidden from the server side filters and combine it with data sent on the server. For [...]

Posted 01 December 2008 † Gareth Heyes § Cascading Style Sheets § Security § csrf § xss ‡ Comments (7)