February 2008
Firefox 3 disallows cross-site XBL
Well, I decided to play around a little with Firefox 3 Beta 3 today and discovered that it looks like the ever popular -moz-binding css attribute is now rendered a little less useful. It is now impossible to load off-site XBL via this method. However, all is not lost. For in patching one of the…
wp-aspxrewriter alpha test
Well, today I deployed an early version of my wp-aspxrewriter component to my personal blog. This component is an ASP.NET HttpModule in conjunction with a Wordpress plugin and code hack (official patch for the hack submitted at their trac site) which allows 100% pretty permalinks under IIS6. The…
An XML based XSS PoC platform
Well, long time no post. Been in hospital. Been busy with college. Life gets in the way of hacking. Usually when one wast to illustrate an XSS vulnerability there are two approaches. The first is to show the client the XSS and assume that they know and understand the impact. The second is to write…