XSLeaker

XSLeaker XSLeaker 是一个帮助在网站上发现 XS-Leaks 的工具。该工具会比较不同状态下已知泄露技术对应的资源值（例如 iframe 的数量），以发现差异。 XSLeaker 由两个组件组成：一个用于在不同状态下收集资源值的 Chrome 扩展，以及一个用于比较和显示结果的 node.js 服务器。 该工具会检查以下资源值是否存在差异： URL iframe 数量 HTTP 状态码 重定向次数 WebSocket 连接数 可聚焦元素的 ID HTTP 头 Content-Length X-Frame-Options X-Content-Type-Options...

FreeBSD : Mozilla -- XS-leak attack (61be5684-4222-11f0-976e-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 61be5684-4222-11f0-976e-b42e991fc52e advisory. [email protected] reports: Script elements loading cross-origin resources generated load and error...

Mozilla -- XS-leak attack

[email protected] reports: Script elements loading cross-origin resources generated load and error events which leaked information enabling XS-Leaks attacks...

Is your web browser vulnerable to data theft? XS-Leak explained

In recent news, IT security researchers from Ruhr-Universität Bochum RUB and the Niederrhein University of Applied Sciences have disclosed 14 new cross-site leak also known as XSLeak or XS-Leak attacks that can affects modern browsers, such as Google Chrome, Microsoft Edge, Mozilla Firefox, and...