Paid Advertising

SLA.CKERS.ORG
HA.CKERS SLACKING
sla.ckers.org web application security lab forums
If you have some interesting news or want to throw up a link to discuss it, here's the place. Anything is okay, even shameless vendor launches (since that is often applicable to what we work on). 
Re: What do you have as Firefox extention?
Posted by: hackathology (IP Logged)
Date: April 13, 2007 07:36PM

thanks Rsnake.

[hackathology.blogspot.com]

Re: What do you have as Firefox extention?
Posted by: rsnake (IP Logged)
Date: April 15, 2007 12:18AM

@jungsonn, sure, it does... if it expects data in the post data, and you only send the URL it won't do anything. But if you change the request to use GET instead of POST and encode the data on the URL string you can often get the same effect (seems to most often affect J2EE and .NET applications).

- RSnake
Gotta love it. http://ha.ckers.org

Re: What do you have as Firefox extention?
Posted by: SW (IP Logged)
Date: April 15, 2007 02:00AM

nEUrOO Wrote:
-------------------------------------------------------
> @jungsonn:
> WebDeveloper's 'View Generated Source' is a good
> tool for me
> Also nice on huge page to have the informations on
> id/classes (used it a lot to make a wikipedia skin
> for instance).


This is so loaded with features I don't know them all or care about most of them. But I love the "View generated source." It is good for developing greasemonkey scripts (or javascript in general) because "View Source" will just show the original, not after executing a script.

Also I use view/edit cookies, view Javascript, edit CSS, Form method conversion, disable javascript/images, and occasionally the display element information tool.

Re: What do you have as Firefox extention?
Posted by: rsnake (IP Logged)
Date: April 15, 2007 02:11AM

I really don't use many of those tools (view generated source is awesome but most of the rest isn't really that interesting to me). However, one thing I have had to use on occasion is the disable meta refresh function. That's just super useful in certain circumstances where I want the <noscript><meta tag to stop refreshing me to the "please enable JS" page. God I hate that.

- RSnake
Gotta love it. http://ha.ckers.org

Re: What do you have as Firefox extention?
Posted by: hackathology (IP Logged)
Date: April 15, 2007 08:14AM

Rsnake, i can only see disable Meta redirects and view meta tag information. Where is the disable meta refresh function?

[hackathology.blogspot.com]

Re: What do you have as Firefox extention?
Posted by: ma1 (IP Logged)
Date: April 15, 2007 09:01AM

hackatology, "meta redirects" == "meta refresh" I guess.

rsnake, I'm enhancing the "hide <noscript> element" advanced restriction to prevent those specific meta refreshes ;)

Re: What do you have as Firefox extention?
Posted by: rsnake (IP Logged)
Date: April 15, 2007 07:34PM

Yes, they are one in the same. ma1, that's a wonderful feature. 9 times out of 10 it's a senseless redirect, because I know enough to navigate if I'm the kind of person who has it disabled. The other times I can just turn it back on and see what it was supposed to look like.

Are you taking other requests? ;)

- RSnake
Gotta love it. http://ha.ckers.org

Re: What do you have as Firefox extention?
Posted by: hackathology (IP Logged)
Date: April 17, 2007 07:35AM

Rsnake, you tried proxmon?

[hackathology.blogspot.com]

Re: What do you have as Firefox extention?
Posted by: rsnake (IP Logged)
Date: April 19, 2007 01:54PM

I looked at it, but this doesn't appear to fit any need I have, plus being python based I pretty much immediately get turned off. Not that it's not a good tool, and I understand why they think it's cross platform, but I'm not going to be using Java proxies through a shell on a remote FBSD server, and running it through cygwin on my windows box isn't super usable either. Maybe other people need it though.

- RSnake
Gotta love it. http://ha.ckers.org

Re: What do you have as Firefox extention?
Posted by: ma1 (IP Logged)
Date: April 19, 2007 07:02PM

rsnake Wrote:
-------------------------------------------------------
> ma1, that's a
> wonderful feature. 9 times out of 10 it's a
> senseless redirect, because I know enough to
> navigate if I'm the kind of person who has it
> disabled. The other times I can just turn it back
> on and see what it was supposed to look like.

NoScript 1.1.4.8RC1

> Are you taking other requests? ;)

You're welcome :)

Re: What do you have as Firefox extention?
Posted by: rsnake (IP Logged)
Date: April 21, 2007 12:41AM

Sweeeeeet, nicely done. That is one I won't be disabling often!

- RSnake
Gotta love it. http://ha.ckers.org

Re: What do you have as Firefox extention?
Posted by: hackathology (IP Logged)
Date: April 22, 2007 04:07AM

rsnake, thanks for the comments.

[hackathology.blogspot.com]



Sorry, only registered users may post in this forum.