Skip to content

Monthly Archives February 2009

Hackvertor now translates

Whilst reading everyone’s tweets, I found Yosuke Hasegawa had posted a binary string. I decoded it out of curiosity, first it was binary, then character codes, then UTF-7 and finally Japanese. So yeah you can tell what’s coming, I wanted Hackvertor to decode it all for me. Here’s the string:-
00101011 01001101 01000111 00111000 01110111 01010111 [...]

Posted 26 February 2009 † Gareth Heyes § Security § fun § hackvertor ‡ Comments (3)

Inline UTF-7 E4X javascript hijacking

I finally get to talk about this because Yosuke Hasegawa has already disclosed the IE/FF variant with JSON data. I also discovered the UTF-7 JSON hacking independently but I wasn’t aware it was public so I didn’t blog about it. Just in case you haven’t, you should check out his presentation it’s awesome!
Anyway onto E4X [...]

Posted 24 February 2009 † Gareth Heyes § Security § e4x § javascript ‡ Comments (11)

Javascript unique strings with RegExps

I wrote a cool new feature for Hackvertor which found unique strings in some text, basically the function took a argument of a regular expression to split the text into parts and then scan a dynamic reg exp to check if the strings were unique are not.
I thought I’d run through the code as [...]

Posted 04 February 2009 † Gareth Heyes § javascript ‡ Comments (0)