Tag Archives: Clickjacking

Clickjacking and XSS for reading autocomplete credentials.

Posted on October 26, 2011 by Phil

By combining Cross Site Scripting (XSS) with Clickjacking and JavaScript it is possible to extract passwords and data stored within the browsers Autocomplete cache. Autocomplete is a feature supported by all browsers to cache input field values – it can … Continue reading →

Posted in JavaScript | Tagged , , | Leave a comment

Clickjacking and Phishing with help from the HTML5 JavaScript Sandbox

Posted on May 1, 2011 by Phil

HTML5 has some nice new features one of which is JavaScript Sandboxing using iframes. Chrome is currently the only browser to support this but you can be sure others will soon follow. The sandbox allows control over what can be … Continue reading →

Posted in HTML5 | Tagged , , , , | 5 Comments