Tag Archives: ie

Security Bookmarklets

Posted on January 28, 2008 by Fernando

I took a couple of days from my school vacation to write 3 bookmarklets that will help me when auditing web sites, I’d like to share them here because I know that they’ll help some of my friends, and probably … Continue reading →

Posted in English, Programming, Security, Uncategorized | Tagged , , | Leave a comment

Google Gadgets XSS (IE6/Opera)

Posted on November 25, 2007 by Fernando

There is a recent discussion on ha.ckers.org regarding a possible CSRF that could allow an attacker to inject an evil gadget on someobdy else’s iGoogle page. After checking the format of the xml file used to define the gadgets properties, … Continue reading →

Posted in English, Security, XSS | Tagged , , , , | 2 Comments