lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-Id: <200806161350.24632.tmb@65535.com> Date: Mon, 16 Jun 2008 13:50:24 +0100 From: Tim Brown <tmb@...35.com> To: full-disclosure@...ts.grok.org.uk Subject: Re: XSS Browser hijacking PoC? On Monday 16 June 2008 12:26:48 Hanno Böck wrote: > Am Mittwoch 11 Juni 2008 schrieb Aaron Katz: > > Several months ago, there was a post about a proof of concept for > > complete browser hijacking via XSS. IIRC, the hijacked browser would > > periodically query a management server, and the management server would > > track the hijacked browsers in a database. The person controlling the > > management server could then instruct the hijacked browsers to do his > > bidding. > > > > The thing is, I can't find the tool. I'm wondering if anyone still knows > > where it is. > > BeEF? (google for it, according to german law I'm probably not allowed to > post this link) http://www.google.com/search?q=xssshell Cheers, Tim -- Tim Brown <mailto:tmb@...35.com> _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists