Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Clicking to the Past
Chris Wysopal, 2008-10-21

When the first details trickled out about a new attack, dubbed “clickjacking” by the researchers who found it, the descriptions made me think of the tricks I used to pull during penetration tests ten years ago to get administrator privileges: Tricking the user into issuing a command on an attacker’s behalf is one of the oldest attack vectors in the book.

Comments Mode:
Clicking to the Past 2008-10-29
Anonymous
Clicking to the Past 2008-11-19
Anonymous (1 replies)
Re: Clicking to the Past 2008-11-19
Anonymous
Heheh no of course not an your entirely right. Ways mentioned here only work on those in need of a serious IT clue bag.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/483/35245#35245







 

Privacy Statement
Copyright 2009, SecurityFocus