Outer Web | Explore

/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.

You are here		mike.sherov.com The Rise of Man In The Middle (MITM) Based Session Hijacking Attacks \| Mike Sherov
\|	\|	www.evil.blog Facebook's Oculus - Cross-Site Content Hijacking (XSCH) to Bypass SOP - Paulos Yibelo - Hacking Research [AI summary] A security researcher details a cross-site content hijacking vulnerability that allowed malicious Flash files to bypass Facebook's SOP by exploiting permissive crossdomain.xml settings on Oculus, leading to a quick patch.	4.4 parsecs Travel
\|	\|
\|	\|	labanskoller.se Laban Sköllermark \| Man-in-The-Middle Session Fixation in Securitas Direct My Pages During 2021 I had access to a facility equipped with an alarm system from Securitas Direct. I had access as a regular user to Securitas Direct's My Pages at mypages-pro.securitas-direct.com, which is used to administer some aspects of one's security alarm installation. That web application suffered a CWE-384 Session Fixation vulnerability which can be used by an attacker in a so-called Man-In-The-Middle (MiTM) position. Home page of Securitas Direct My Pages In summary, if an attacker is on the same netw...	3.3 parsecs Travel
\|	\|
\|	\|	tom.vg Timing Attacks in the Modern Web - tom.vg [AI summary] This article explains cross-site and browser-based timing attacks that allow attackers to infer sensitive information from response sizes using side-channel leaks in web browsers.	3.8 parsecs Travel
\|	\|
\|	\|	blog.cloudflare.com Modifying HTTP response headers with Transform Rules HTTP response headers can now be modified with Cloudflare Transform Rules.	26.5 parsecs Travel
\|