Detailed write up on new CSRF Token hack using CSS History:
http://securethoughts.com/2009/07/hacking-csrf-tokens-using-css-history-hack/
Proof of Concept here:
http://www.securethoughts.com/security/csrfcsshistory/csrfscan.html
Best Regards.
Showing posts with label CSRF Token hack. Show all posts
Showing posts with label CSRF Token hack. Show all posts
Thursday, July 23, 2009
Hacking CSRF Tokens using CSS History Hack
Subscribe to:
Posts (Atom)