Trying to fetch any "structured" documentation/tools/etc.. about this stuff..


Sister Threads
§ Code Obfuscation Algorithms
§ Tricks for getting a reference to window
§ Code Execution/Evaluation
§ Hiding Source Code
§ String hacks (ways to make a string)

Quote

Misc Tools
§ Firebug Lite
§ IE8 JS Console
§ Hackvertor
§ Astalanumerator

Quote

JavaScript Porn
§ JSLibs JavaScript language advanced Tips & Tricks
§ Google Caja Sandbox Attack Vectors
§ JavaScript Uses of Operators

Quote

ECMAScript Standards
§ ECMAScript 3
§ ECMAScript Components
§ ECMAScript CP
§ ECMAScript 4 XML (E4X)
§ ECMAScript 4 (JavaScript 2.0)

List of JavaScript implementations
§ http://en.wikipedia.org/wiki/List_of_ECMAScript_engines (hopefully wikipedians will keep that list updated)

JavaScript references
§ Mozilla: https://developer.mozilla.org/en/JavaScript
§ Microsoft: http://msdn.microsoft.com/en-us/library/yek4tbz0(VS.85).aspx
§ WebKit, Opera refs suck..

Quote

Zalewski's Browser Security Handbook
§ http://code.google.com/p/browsersec/wiki/Part1#Hypertext_Markup_Language (mostly XSS stuff, the tables are good to check for features on different browsers)

--------------------------------
http://sirdarckcat.blogspot.com/ http://www.sirdarckcat.net/ http://foro.elhacker.net/ http://twitter.com/sirdarckcat



Edited 19 time(s). Last edit at 06/10/2009 05:41PM by .mario.

Browser Security Handbook
http://code.google.com/p/browsersec/

Google doctype's Web Security section
http://code.google.com/p/doctype/wiki/ArticlesXSS

---------------------------------------------------------------------------------
[[url=http://voodoo-labs.org]Voodoo Research Group[/url]]
[[url=http://foro.undersecurity.net/]US.net forum[/url]]

C1c4Tr1Z, that goes here: http://sla.ckers.org/forum/list.php?2 but almost all information there was discussed there in the past, so..

The objective of this new forum would be.. script obfuscation (maybe css, js, html as well), sandbox escaping, code hiding, etc..

--------------------------------
http://sirdarckcat.blogspot.com/ http://www.sirdarckcat.net/ http://foro.elhacker.net/ http://twitter.com/sirdarckcat



Edited 3 time(s). Last edit at 06/08/2009 09:51PM by sirdarckcat.

http://wocares.com/pf3.php is a nice tool for CSRF

dudes, I mean, this is not csrf nor xss =/

--------------------------------
http://sirdarckcat.blogspot.com/ http://www.sirdarckcat.net/ http://foro.elhacker.net/ http://twitter.com/sirdarckcat

ergh, didn't see what forum this was in. Sorry.

dude....DUDE!!! don't forget about SQLMap, you're neighborhood automatic injection tool :)