Category: Browser Security

Firefox 3.6 FileAPI Exif Injection

W3C File API gives web applications the functionality to work with objects and their data elements through drag and drop.  Firefox 3.6 now supports File API. Given its potential, I decided to test the waters using Exif meta data. Most web applications read Exif meta data from JPEG images as a normal strings so in [...]

Spoofed URL’s w/ Obfuscation and Preference Hijacking

URL obfuscation has been around for awhile. In a nutshell, it’s simply concatenating IP octets into hex and then turning it into a decimal number. The result is a URL similar to: http://1249717651/ As you see, there is no real way to know whether your on the Official Google web page or if the site [...]

Login