arpy

Arpy Arpy 是一款易于使用的 macOS ARP 欺骗中间人攻击（MiTM）工具。 它提供 3 个特定功能： 数据包嗅探 访问过的域名 通过 Gource 查看访问过的域名 每个功能将在下文详细说明。 已测试的操作系统（截至当前） Darwin 14.3.0 Darwin Kernel Version 14.3.0（Mac OS X） 依赖 Python 2.7 Gource Scapy libdnet 安装 Gource brew install gource Scapy pip install scapy libdnet $ git clone...

SUSE CVE-2007-4879

Mozilla Firefox before Firefox 2.0.0.13, and SeaMonkey before 1.1.9, can automatically install TLS client certificates with minimal user interaction, and automatically sends these certificates when requested, which makes it easier for remote web sites to track user activities across domains by...

Brave Software: Cross domain tracking even with 3rd party cookies disabled.

Cross domain tracking Default settings from Brave browser has 3rd party cookies disabled. Which I am assuming also disables 3rd part storage like IndexedDB etc. Because of this protection it is not possible for a 3rd party to track users across multiple domains. But, Even though third-party cooki...

CVE-2015-5885

The CFNetwork Cookies component in Apple iOS before 9 allows remote attackers to track users via vectors involving a cookie for a top-level domain...

CVE-2009-2198

Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of domain name, which makes it easier for remote web servers to track users...

CVE-2007-3827

Mozilla Firefox allows for cookies to be set with a null domain aka "domainless cookies", which allows remote attackers to pass information between arbitrary domains and track user activity, as demonstrated by the domain attribute in the document.cookie variable in a javascript: window...

netscape.4.x.java.txt

Netscape 4.x javascript security flaw Versions tested: Windows98/Netscape4.7,Windows95/Netscape4.05 Description: Credits to Henri Torgemane Netscape has a "persistent" navigator object, which means that any data put in the window.navigator object will be accessible to every other window as long a...