New vector from sla.ckers

[Gareth]

I've posted it here in case you can't get on sla.ckers:-
http://www.businessinfo.co.uk/labs/phpids/urlvector.php

[Mario Heiderich]

Hi!

Thanks - I wasn't online this weekend so I couldn't fix it yet. Will happen asap ;)

Grx,
.mario

On Mon, Sep 1, 2008 at 10:34 AM, Gareth <gazh...@gmail.com> wrote:

I've posted it here in case you can't get on sla.ckers:-
http://www.businessinfo.co.uk/labs/phpids/urlvector.php

--
_______________________
php-ids.org

.ﻩﻨﺮﻪﺴ

[Gareth]

This is just beautiful :)
Check out the centrifuge evasion.

http://www.businessinfo.co.uk/labs/phpids/phpids3.html

default xml namespace=toolbar,b=1&&this.atob
default xml namespace=toolbar,e2=b('ZXZhbA')
default xml namespace=toolbar,e=this[toolbar,e2]
default xml namespace=toolbar,y=1&&name
default xml namespace=toolbar
default xml namespace=e(y)

On Sep 1, 9:36 am, "Mario Heiderich" <mario.heider...@googlemail.com>
wrote:

> Hi!
>
> Thanks - I wasn't online this weekend so I couldn't fix it yet. Will happen
> asap ;)
>
> Grx,
> .mario
>

[Mario Heiderich]

Pure sweetness - and again almost painful to close this gap ;)

Very nice work!

--
_______________________
php-ids.org

.ﻩﻨﺮﻪﺴ

[Gareth]

Sniff Sniff

On Sep 12, 10:21 am, "Mario Heiderich"

[Mario Heiderich]

Anway - I bet E4X has more secrets in stock on how to execute and obfuscate JS ;)

--
_______________________
php-ids.org

.ﻩﻨﺮﻪﺴ

[Gareth]

Javascript is weird :D

delete~typeof~typeof~typeof~typeof~typeof~typeof~alert(1)

On Sep 12, 10:46 am, "Mario Heiderich"

[Mario Heiderich]

Awesome stuff - and very interesting bug which was uncovered by this vector. Fixed!

--
_______________________
php-ids.org

.ﻩﻨﺮﻪﺴ