Tag Archives: google

Google Wave – Make your friends logout gadget

Posted on November 20, 2009 by Fernando

Adding this gadget to any wave will make people log out when they see it: http://beford.org/stuff/waveg.xml The code: <script type=”text/javascript”> top.location=”https://wave.google.com/wave/logout”; </script>

Posted in Uncategorized | Tagged , , , , , | 3 Comments

Gmail Cross Site Scripting

Posted on May 4, 2008 by Fernando

El dia de hoy les traigo un pequeño descubrimiento, una vulnerabilidad en el sistema de Presentaciones (para los burros, powerpoint) en linea de Google Mail. El problema es sencillo, y no le tomara mucho tiempo arreglar a los de Mountain View, pero hay algo que me preocupa más. Describire el problema de Gmail rapidamente para poder pasar al detalle del plugin de flash. Continue reading →

Posted in Español, Security, XSS | Tagged , , , , , | Leave a comment

Google Gadgets XSS (IE6/Opera)

Posted on November 25, 2007 by Fernando

There is a recent discussion on ha.ckers.org regarding a possible CSRF that could allow an attacker to inject an evil gadget on someobdy else’s iGoogle page. After checking the format of the xml file used to define the gadgets properties, … Continue reading →

Posted in English, Security, XSS | Tagged , , , , | 2 Comments