Category Archives: JavaScript

Taking screenshots using XSS and the HTML5 Canvas

Posted on April 16, 2012 by Phil

Using the HTML5 Canvas its possible to use XSS to take screenshots of administration and management interfaces that might not have access to. Blind Stored XSS By injecting script tags containing an external JavaScript resource into arbitrary HTTP input fields you can attempt … Continue reading →

Posted in Exploits, HTML5, JavaScript | Tagged , , | 9 Comments

JavaScript and Daylight Savings for tracking users.

Posted on October 2, 2011 by Phil

Each country has their own timezone – although timezones are not generally unique variations in the offset can enable a website using JavaScript to pinpoint your location and operating system to an alarming degree of accuracy. Most countries time differs … Continue reading →

Posted in JavaScript | Tagged , , | 3 Comments

Javascript keylogger in JQuery.

Posted on May 21, 2011 by Phil

I needed to capture someone’s login credentials using cross site scripting. However I had 3 problems. Firstly there was no XSS on the login page, secondly the only XSS was reflected, meaning it only affected the current page and thirdly … Continue reading →

Posted in Exploits, JavaScript | Tagged , , , | 1 Comment