what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from nono2357

mozThunDoS.txt

Posted Feb 26, 2006

Authored by nono2357

Mozilla Thunderbird's WYSIWYG rendering engine insufficiently filters javascript scripts. It is possible to write javascript in the SRC attribute of the IFRAME tag. This leads to execution when the email is edited (for instance when replying to the email), even if javascript is disabled in the preferences. Versions 1.0.7 and below are affected.

tags | exploit, javascript

SHA-256 | b215a779092dd0caca33f471515297a08cca5d1ca016e757d5235e56f8590ec5

Download | Favorite | View

TTLeak.py

Posted Dec 8, 2004

Authored by hackademy, nono2357 | Site thehackademy.net

This tool can, under some conditions, calculate the exact time of a dns query made by someone, using TTL information cached on his ISP's nameservers.

SHA-256 | 397ca55e70fd272383102f3bb1e3eef0aecaffde8efee6c48e40cffcb5463c13

Download | Favorite | View