Monthly Archives: May 2011

Exploit: PHPCaptcha / Securimage is not secure.

Posted on May 25, 2011 by Phil

Recently I discovered an easy way to bypass PHPCaptcha also known as SecurImage. The method described below will break the CAPTCHA every time, without fail and affects versions 1.0.4 and above. Previous versions are also probably vulnerable tho only exploit … Continue reading →

Posted in Exploits, PHP | Tagged , , , , | 21 Comments

Javascript keylogger in JQuery.

Posted on May 21, 2011 by Phil

I needed to capture someone’s login credentials using cross site scripting. However I had 3 problems. Firstly there was no XSS on the login page, secondly the only XSS was reflected, meaning it only affected the current page and thirdly … Continue reading →

Posted in Exploits, JavaScript | Tagged , , , | 1 Comment

Clickjacking and Phishing with help from the HTML5 JavaScript Sandbox

Posted on May 1, 2011 by Phil

HTML5 has some nice new features one of which is JavaScript Sandboxing using iframes. Chrome is currently the only browser to support this but you can be sure others will soon follow. The sandbox allows control over what can be … Continue reading →

Posted in HTML5 | Tagged , , , , | 6 Comments