Javascript SOP bypassing

sla.ckers.org is
ha.ckers sla.cking

Q and A on cross site request forgeries and breaking into sessions. It's one of the attacks that XSS enables and the attack of the future. For Session, fixations, hijacking, lockout, replay, session riding etc....

Go to Topic: Previous•Next

Go to: Forum List•Message List•New Topic•Search•Log In

Javascript SOP bypassing

Posted by: Jean Pascal Pereira

Date: September 05, 2010 08:13AM

Hi,

I'd like to work on new possibilities to bypass the same origin policy of Javascript. There has been a bug in safari before and it seemed to be pretty simple doing it this way. I'm sure there are working possibilities to break out of the SOP.

My vendors:

Mozilla Firefox
Microsoft IE 8
Google Chrome

Safari doesn't make much sense for me because I'm not a Mac user.

If anyone like to work on this together with me, feel free to say hello. If I got any vulnerabilities, I gonna post them.

Regards,

Jean Pascal Pereira

Options: Reply•Quote

Re: Javascript SOP bypassing

Posted by: Skyphire

Date: September 19, 2010 04:30PM

Feel free to post them, I'm not aware of any.

Options: Reply•Quote

Go to: Forum List•Message List•Search•Log In

Sorry, only registered users may post in this forum.

Click here to login