Full Disclosure mailing list archives
Announcing "Session Destroyer" -- Invalidate your webapp logins with ease!
From: "Kristian Erik Hermansen" <kristian.hermansen () gmail com>
Date: Wed, 24 Dec 2008 05:20:21 -0800
The art of Crowd SuRFing the massess. This proof-of-concept handles most of the Alexa Top 100 websites that require logins. Mainly just US sites for now, but more will be added later. If you pull this into an IFRAME on your site, you can mess with lots of people. Nothing new. Just something fun for the season. Cheers and happy holidays :-) http://kristian.hermansen.googlepages.com/session.destroyer.html -- Kristian Erik Hermansen Have you tried Session Destroyer yet? <http://kristian.hermansen.googlepages.com/session.destroyer.html> _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Announcing "Session Destroyer" -- Invalidate your webapp logins with ease! Kristian Erik Hermansen (Dec 24)
- Re: Announcing "Session Destroyer" -- Invalidate yourwebapp logins with ease! Admin - Opencosmo Security (Dec 24)