Tagged Questions

2
votes
2answers
357 views

How does the Yahoo webmail exploit work?

I got an email (referring to me by name) from somebody I knew a while ago and the email itself was just two/three lines containing a bit-ly link. Although it seemed like it actually could be ...
2
votes
1answer
161 views

Can JavaScript defeat source port randomization?

Can malicious JavaScript defeat source-port randomization in browsers? I am reading a research paper which seems to claim that the answer is yes: many browsers seem to always assign a random ...
0
votes
0answers
69 views

How to decode this runforestrun gootkit [closed]

Infected site is hxxp://www.infraredpsi.com/Pluginlab/Scripts/menuscript.js online scan result: http://urlquery.net/report.php?id=141893 I can de-obfuscate the first layer of the code that use the ...
1
vote
1answer
508 views

HTTPS and cache injection

I understand the downside of this attack and what wrong can be done. But I dont understand how is it done ? Well, I need to educate myself, any pointers would be useful.
4
votes
1answer
242 views

How do I check the code of a Chrome extension to make sure it's not stealing my info?

I've been reading more and more about just how much access browser extensions can have to your data. This is a little unsettling, so I'm curious if there is a way to Vet these extensions and make sure ...
3
votes
4answers
169 views

Attack where browser URL appears valid

I remember reading about an attack where the "location bar" in a user's browser displays a valid URL (e.g. https://www.paypal.com/), but the traffic is really being directed to or intercepted by an ...