jetlib.sec » Tags » clickjacking

Feeds

133351 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

16 items tagged "clickjacking"

Related tags: wordpress [+], vulnerability [+], browser [+], wellington new zealand [+], wellington [+], web [+], part [+], new zealand [+], exploit [+], web apps [+], shells [+], security pros [+], facebook [+], attack web [+], worm [+], warns [+], update [+], safari browser [+], safari [+], paul stone [+], party websites [+], opera browser [+], opera [+], netscape [+], internet explorer [+], hundreds of thousands [+], hits [+], hackers [+], functionality [+], cross site scripting [+], black hat [+], avant browser [+], avant [+], attacks [+], attack [+], application [+]

• September 22, 2011
• 8:25

  WordPress 3.1.2 Clickjacking

   » ‎ Packet Storm Security Exploits
  WordPress versions 3.1.2 and below clickjacking exploit that was part of an OWASP presentation on September 20th, 2011 in Wellington, New Zealand.

  Tags:  part wordpress clickjacking new-zealand wellington wellington-new-zealand exploit  

• 8:25

  WordPress 3.1.2 Clickjacking

   » ‎ Packet Storm Security Recent Files
  WordPress versions 3.1.2 and below clickjacking exploit that was part of an OWASP presentation on September 20th, 2011 in Wellington, New Zealand.

  Tags:  part wordpress clickjacking new-zealand wellington wellington-new-zealand exploit  

• 8:25

  WordPress 3.1.2 Clickjacking

   » ‎ Packet Storm Security Misc. Files
  WordPress versions 3.1.2 and below clickjacking exploit that was part of an OWASP presentation on September 20th, 2011 in Wellington, New Zealand.

  Tags:  part wordpress clickjacking new-zealand wellington wellington-new-zealand exploit  

• September 21, 2011
• 7:15

  Clickjacking For Shells

   » ‎ Packet Storm Security Recent Files
  Whitepaper called Clickjacking for Shells. Two years after the world was warned about clickjacking, popular web apps are still vulnerable and no web app exploits have been published. With many security pros considering clickjacking to have mere nuisance value on social networks, the attack is grossly underestimated. In this presentation, the author demonstrates step by step how to identify vulnerable applications, how to write exploits that attack web apps and also how to protect against clickjacking.

  Tags:  shells web clickjacking web-apps attack-web security-pros  

• 7:15

  Clickjacking For Shells

   » ‎ Packet Storm Security Misc. Files
  Whitepaper called Clickjacking for Shells. Two years after the world was warned about clickjacking, popular web apps are still vulnerable and no web app exploits have been published. With many security pros considering clickjacking to have mere nuisance value on social networks, the attack is grossly underestimated. In this presentation, the author demonstrates step by step how to identify vulnerable applications, how to write exploits that attack web apps and also how to protect against clickjacking.

  Tags:  shells web clickjacking web-apps attack-web security-pros  

• May 26, 2011
• 6:21

  WordPress Update Includes Clickjacking Protection

   » ‎ Packet Storm Security Headlines
  WordPress Update Includes Clickjacking Protection

  Tags:  wordpress update clickjacking  

• August 18, 2010
• 0:00

  Facebook Warns Of Clickjacking Scam

   » ‎ Packet Storm Security Headlines
  Facebook Warns Of Clickjacking Scam

  Tags:  facebook warns clickjacking  

• July 17, 2010
• 1:00

  Avant Browser (V11.7 build 45) Clickjacking Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  Avant Browser (V11.7 build 45) Clickjacking Vulnerability

  Tags:  avant clickjacking browser vulnerability avant-browser  

• 1:00

  Netscape Browser v9.0.0.6 Clickjacking Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  Netscape Browser v9.0.0.6 Clickjacking Vulnerability

  Tags:  netscape clickjacking browser vulnerability  

• 1:00

  Safari Browser v4.0.2 Clickjacking Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  Safari Browser v4.0.2 Clickjacking Vulnerability

  Tags:  safari clickjacking browser safari-browser vulnerability  

• 1:00

  Opera Browser v10.60 Clickjacking Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  Opera Browser v10.60 Clickjacking Vulnerability

  Tags:  opera clickjacking browser opera-browser vulnerability  

• June 20, 2010
• 21:02

  [Slides] Next Generation Clickjacking

   » ‎ SecDocs
  Authors: Paul Stone
  Tags: XSS CSRF clickjacking
  Event: Black Hat EU 2010
  Abstract: Clickjacking is a technique that can be used to trick users into performing unintended actions on a website by formatting a web page so that the victim clicks on concealed links, typically hidden within an IFRAME. However, in comparison to other browser-based attacks such as XSS (Cross-site Scripting) and CSRF (Cross-site Request Forgery), Clickjacking has hitherto been regarded as a limited attack technique in terms of consequences for the victim and the scenarios in which it can be used. During this talk I intend to demonstrate that this assumption is incorrect, and that today’s Clickjacking techniques can be extended to perform powerful new attacks that can affect any web application. This talk will cover the basics of Clickjacking, quickly moving on to more powerful, and newly developed, techniques. The presentation will explore further ways in which a user can be tricked into interacting with a victim site and how these can lead to attacks such as injecting data into an application (bypassing all current CSRF protections) and the extraction of data from websites without the user’s knowledge. The demo will show several cross-browser techniques, and newly released browser-specific vulnerabilities in Internet Explorer, Firefox and Safari/Chrome which can be used to take full control of a web application. I will also be demonstrating and releasing a new tool that allows for easy point-and-click creation of multi-step Clickjacking attacks on any web application, by visually selecting the links, buttons, fields and data to be targeted. The tool will highlight the need for improved Clickjacking defences in both browsers and web applications.

  Tags:  web application clickjacking paul-stone cross-site-scripting internet-explorer black-hat  

• June 01, 2010
• 4:28

  Clickjacking attack spreads virally across Facebook, Sophos reports

   » ‎ Sophos security news
  Hackers exploit 'Like' functionality to promote third-party websites.

  Tags:  facebook attack clickjacking party-websites hackers functionality  

• 0:00

  Clickjacking Worm Hits Hundreds Of Thousands Of Facebook Users

   » ‎ Packet Storm Security Headlines
  Clickjacking Worm Hits Hundreds Of Thousands Of Facebook Users

  Tags:  worm clickjacking hits hundreds-of-thousands  

• May 18, 2010
• 0:00

  Prevent Clickjacking Attacks

   » ‎ Packet Storm Security Headlines
  Prevent Clickjacking Attacks

  Tags:  clickjacking attacks  

• April 15, 2010
• 0:00

  Clickjacking Is Bad

   » ‎ Packet Storm Security Headlines
  Clickjacking Is Bad

  Tags:  clickjacking