博客_function is_ShadowHider(){return true}

文章列表

[zz]Drag and Drop XSS in Firefox by HTML5 (Cross Domain in frames)

2011-12-31 15:20

Drag and Drop XSS in Firefox by HTML5 (Cross Domain in frames)

Bug has been reported/NoScript users are safe

First of all, this vulnerability and the related techniques have already been reported to Mozilla on 21st Nov 2011, without having any specific result till the date of this report (issue ID 704354 – works on all the latest versions which support HT

阅读全文>>

类别：Xss|评论(0) |浏览(141)

Steve Jobs (1955-2011)

2011-10-06 11:17

阅读全文>>

类别：默认分类|评论(0) |浏览(178)

[zz]Chrome Extensions for Security Professionals

2011-07-14 16:11

From:http://blog.anantshri.info/chrome-extensions-for-security-professionals/

During Recent days we have seen a phenomenal increase in usage of Google Chrome Browser, however Security Professionals are still looking at Firefox for there day to day life usage, the basic reason behind it is large set of

阅读全文>>

类别：Some Tools|评论(0) |浏览(368)

关于挂马检测对抗的一点思路

2011-06-30 16:04

很多人在挂0day时一不小心就被安全公司截获了样本，有些时候，如果你实在bypass不了某款安全软件的检测的话，那么就绕着它走吧。

虽然可能打不中目标，但也比0day被抓了去要好。

比如下面的POC：

</body></html>

阅读全文>>

类别：脚本安全|评论(0) |浏览(674)

DOM Tracer.xpi

2011-05-22 14:57