what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 7 of 7

Files from bitlance winter

ie6fire.txt

Posted Jun 1, 2005

Authored by bitlance winter

Local file disclosure flaw that affects both Firefox and IE6. Sample exploitation provided.

tags | exploit, local

SHA-256 | 7a9d672c68d19b5548033ad4ebe63b121c36d3aebaed302b433c1118bf7650e2

Download | Favorite | View

browserDisclose.txt

Posted Mar 7, 2005

Authored by bitlance winter, Mr. Upken | Site xxx.upken.jp

Multiple browsers suffer from a sensitive information disclosure flaw. Proof of concept exploitation included.

tags | exploit, proof of concept, info disclosure

SHA-256 | 4ba7e08f0a610bb4551c5abb6a76d434acea2ba0583996775ff2d8437877fb2c

Download | Favorite | View

mimeenCap.txt

Posted Feb 28, 2005

Authored by bitlance winter

A possible cross site scripting issue exists with Internet Explorer on Windows XP SP2 via MIME Encapsulation of aggregate HTML documents.

tags | advisory, xss

systems | windows

SHA-256 | e76b7dff6e7f071957396721d5553e750215e4cbc254ce242637827495fd2676

Download | Favorite | View

ieBypass.txt

Posted Feb 26, 2005

Authored by bitlance winter

Using magic DNS, the domain name in the Internet Explorer titlebar can be exploited to trick users into visiting a malicious pop-up window. The weakness has been confirmed in version 6.0 on a fully patched system running Windows XP with SP2 installed.

tags | exploit

systems | windows

SHA-256 | f924acc6bb5e37cd8aa464442e76f36b69327f239e6558688048b36fb5c7246c

Download | Favorite | View

ieAgain.txt

Posted Feb 25, 2005

Authored by bitlance winter

A variation of the status bar spoofing flaw in Internet Explorer has been discovered using the label for id trick.

tags | advisory, spoof

SHA-256 | c80295d0329225420d26b9c369016b8552f9c5bdb1bc1cf2e635891d75758745

Download | Favorite | View

bitlanceOpera.txt

Posted Jul 27, 2004

Authored by bitlance winter

A vulnerability in the Opera 7.x series allows phishing attacks due to not updating the address bar if a web page is opened using the window.open function and then replaced using the location.replace function.

tags | exploit, web

SHA-256 | 2b64c28e854d3abd60765551937f3f7fd6835b5e59e4664a7233b171d8bbb4de

Download | Favorite | View

bitlance.txt

Posted Jun 18, 2004

Authored by bitlance winter

A vulnerability has been discovered in Microsoft Internet Explorer that allows for attackers to bypass security zones and conduct phishing attacks.

tags | advisory

SHA-256 | 7cc58b71bd55da16b1839c6169f86a2111c4f4cf84b990d63e22fcc73532f941

Download | Favorite | View