Not logged in | Login

My Security Planet » The Spanner » May 7, 2008

Feeds

13618 items (0 unread) in 75 feeds

WebSecurity

Security

SEO

SEO

Tools

Tools

Opensourcetesting.org News

The Spanner

Firefox find function

Posted: May 7th, 2008, 9:27pm CDT by Gareth Heyes

Tags: Security [edit]
I found this quite interesting, calling the find function in Firefox without parameters displays a dialog box. Calling it multiple times displays loads of find windows
```
for(i=0;i<100;i++) {
 find();
}
```
Javascript getters hacking

Posted: May 7th, 2008, 8:51pm CDT by Gareth Heyes

Tags: Security [edit]
I’m a big fan of strange looking Javascript and using the syntax in ways it wasn’t intended, so I can understand the internals of what’s going on. Tonight I was having trouble sleeping and I decided to try and bypass the PHPIDS, I found that Firefox lets you use getters with unassigned variables and returns the results.
```
the=javascript getter=eval
s = me getter=the('alert(1)')
```

← April 10 (1 item) May 10 (1 item) →