http://www.webadminblog.com/index.php/2008/09/24/new-0day-browser-exploit-clickjacking-owasp-appsec-nyc-2008/ Real Web Admins. Real World Experience. Thu, 11 Mar 2010 18:23:31 -0600 http://wordpress.org/?v=2.9.2 hourly 1 http://www.webadminblog.com/index.php/2008/09/24/new-0day-browser-exploit-clickjacking-owasp-appsec-nyc-2008/comment-page-1/#comment-514 terkoz Mon, 11 May 2009 13:48:01 +0000 http://www.webadminblog.com/?p=90#comment-514 Clickjacking, simply put, is stealing mouse cursor clicks from users. In this type of attack, the malicious user is able to take control of the links that a user may connect to while they are within a malicious domain Clickjacking, simply put, is stealing mouse cursor clicks from users. In this type of attack, the malicious user is able to take control of the links that a user may connect to while they are within a malicious domain

]]> http://www.webadminblog.com/index.php/2008/09/24/new-0day-browser-exploit-clickjacking-owasp-appsec-nyc-2008/comment-page-1/#comment-480 The Silver Bullet Security Podcast » Blog Archive » Show 032 - An Interview with Jeremiah Grossman Fri, 14 Nov 2008 02:17:56 +0000 http://www.webadminblog.com/?p=90#comment-480 [...] Adobe 0-day Browser Exploit [...] [...] Adobe 0-day Browser Exploit [...]

]]> http://www.webadminblog.com/index.php/2008/09/24/new-0day-browser-exploit-clickjacking-owasp-appsec-nyc-2008/comment-page-1/#comment-398 Clickjacking Woes | Webmaster Share Wed, 22 Oct 2008 03:26:25 +0000 http://www.webadminblog.com/?p=90#comment-398 [...] Clickjacking, simply put, is stealing mouse cursor clicks from users. In this type of attack, the malicious user is able to take control of the links that a user may connect to while they are within a malicious domain. [...] [...] Clickjacking, simply put, is stealing mouse cursor clicks from users. In this type of attack, the malicious user is able to take control of the links that a user may connect to while they are within a malicious domain. [...]

]]> http://www.webadminblog.com/index.php/2008/09/24/new-0day-browser-exploit-clickjacking-owasp-appsec-nyc-2008/comment-page-1/#comment-356 Clickjacking Woes | VistaSpyware.com Sat, 18 Oct 2008 06:02:22 +0000 http://www.webadminblog.com/?p=90#comment-356 [...] C­l­i­c­kjac­ki­ng, s­impl­y put, is­ steali­n­g mo­u­se cu­r­so­r­ cli­ck­s f­r­o­m u­ser­s. I­n­ thi­s type o­f­ attack, the mal­i­ci­o­u­s u­ser­ i­s ab­l­e to­ take co­n­tr­o­l­ o­f­ the l­i­n­ks that a u­ser­ may co­n­n­ect to­ w­hi­l­e they ar­e w­i­thi­n­ a mal­i­ci­o­u­s do­mai­n­. [...] [...] C­l­i­c­kjac­ki­ng, s­impl­y put, is­ steali­n­g mo­u­se cu­r­so­r­ cli­ck­s f­r­o­m u­ser­s. I­n­ thi­s type o­f­ attack, the mal­i­ci­o­u­s u­ser­ i­s ab­l­e to­ take co­n­tr­o­l­ o­f­ the l­i­n­ks that a u­ser­ may co­n­n­ect to­ w­hi­l­e they ar­e w­i­thi­n­ a mal­i­ci­o­u­s do­mai­n­. [...]

]]> http://www.webadminblog.com/index.php/2008/09/24/new-0day-browser-exploit-clickjacking-owasp-appsec-nyc-2008/comment-page-1/#comment-355 Latest Antivirus Updates » Clickjacking Woes Sat, 18 Oct 2008 04:26:25 +0000 http://www.webadminblog.com/?p=90#comment-355 [...] Clickjacking, simply put, is stealing mouse cursor clicks from users. In this type of attack, the malicious user is able to take control of the links that a user may connect to while they are within a malicious domain. [...] [...] Clickjacking, simply put, is stealing mouse cursor clicks from users. In this type of attack, the malicious user is able to take control of the links that a user may connect to while they are within a malicious domain. [...]

]]> http://www.webadminblog.com/index.php/2008/09/24/new-0day-browser-exploit-clickjacking-owasp-appsec-nyc-2008/comment-page-1/#comment-354 Clickjacking Woes | TrendLabs | Malware Blog - by Trend Micro Sat, 18 Oct 2008 04:15:38 +0000 http://www.webadminblog.com/?p=90#comment-354 [...] Clickjacking, simply put, is stealing mouse cursor clicks from users. In this type of attack, the malicious user is able to take control of the links that a user may connect to while they are within a malicious domain. [...] [...] Clickjacking, simply put, is stealing mouse cursor clicks from users. In this type of attack, the malicious user is able to take control of the links that a user may connect to while they are within a malicious domain. [...]

]]> http://www.webadminblog.com/index.php/2008/09/24/new-0day-browser-exploit-clickjacking-owasp-appsec-nyc-2008/comment-page-1/#comment-320 Clickjacking: La amenaza fantasma « La noticia tecnológica de la semana Fri, 10 Oct 2008 22:21:26 +0000 http://www.webadminblog.com/?p=90#comment-320 [...] el 88 y tal como parece más lógico), aunque sí conocemos su forma de funcionamiento. En este post hay algunas especualaciones que pueden parecer más o menos lógicas sobre su funcionamiento, [...] [...] el 88 y tal como parece más lógico), aunque sí conocemos su forma de funcionamiento. En este post hay algunas especualaciones que pueden parecer más o menos lógicas sobre su funcionamiento, [...]

]]> http://www.webadminblog.com/index.php/2008/09/24/new-0day-browser-exploit-clickjacking-owasp-appsec-nyc-2008/comment-page-1/#comment-274 New browser exploit: Clickjacking [Security4all] [Belgian Security Blognetwork] | Small Business System Wed, 01 Oct 2008 18:06:12 +0000 http://www.webadminblog.com/?p=90#comment-274 [...] But there is a small overview and explanation of the issue: In a nutshell, it’s when you visit a malicious website and the attacker is able to take control of the links that your browser visits. The problem affects all of the different browsers except something like lynx. The issue has nothing to do with JavaScript so turning JavaScript off in your browser will not help you. It’s a fundamental flaw with the way your browser works and cannot be fixed with a simple patch. With this exploit, once you’re on the malicious web page, the bad guy can make you click on any link, any button, or anything on the page without you even seeing it happening. “A normal user wouldn’t have any idea of what is going on. People in this audience may see something a little different from what they would expect and you would definitely see the results in the page’s source code.” Ebay, for example, would be vulnerable to this since you could embed javascript into the web page, although, javascript is not required to exploit this.(Source: webadminblog.com) [...] [...] But there is a small overview and explanation of the issue: In a nutshell, it’s when you visit a malicious website and the attacker is able to take control of the links that your browser visits. The problem affects all of the different browsers except something like lynx. The issue has nothing to do with JavaScript so turning JavaScript off in your browser will not help you. It’s a fundamental flaw with the way your browser works and cannot be fixed with a simple patch. With this exploit, once you’re on the malicious web page, the bad guy can make you click on any link, any button, or anything on the page without you even seeing it happening. “A normal user wouldn’t have any idea of what is going on. People in this audience may see something a little different from what they would expect and you would definitely see the results in the page’s source code.” Ebay, for example, would be vulnerable to this since you could embed javascript into the web page, although, javascript is not required to exploit this.(Source: webadminblog.com) [...]

]]> http://www.webadminblog.com/index.php/2008/09/24/new-0day-browser-exploit-clickjacking-owasp-appsec-nyc-2008/comment-page-1/#comment-254 B!n@ry-z0ne » أرشيف المدونة » Clickjacking Exploit Attack في جميع المتصفحات Tue, 30 Sep 2008 01:58:36 +0000 http://www.webadminblog.com/?p=90#comment-254 [...] ذات صلة: الأول الثاني الثالث [...] [...] ذات صلة: الأول الثاني الثالث [...]

]]> http://www.webadminblog.com/index.php/2008/09/24/new-0day-browser-exploit-clickjacking-owasp-appsec-nyc-2008/comment-page-1/#comment-240 Steve T Sat, 27 Sep 2008 17:59:57 +0000 http://www.webadminblog.com/?p=90#comment-240 Sounds like a great way to rack up adwords, or other advertising, or traffic exchange clicks. Using this that way would not harm the users at all, it would just make money/gain traffic for the site owner. Still malicious, just not towards users. Sounds like a great way to rack up adwords, or other advertising, or traffic exchange clicks. Using this that way would not harm the users at all, it would just make money/gain traffic for the site owner. Still malicious, just not towards users.

]]>