Browse by Tags

• Jikto
• malware
• Shmoocon
• worm

Jikto in the wild
02 April 07 12:19 PM | Billy | 12 Comments   

It appears that the source code to Jikto is in the wild. I suppose it was only a matter of time, even though as you will see SPI to extreme steps to prevent this from happening. As my Shmoocon presentation slides discuss , Jikto bypasses the "Same Read More...

Filed under: XSS Ajax, Jikto, Shmoocon

XSS+Ajax worm attacking Yahoo mail users
13 June 06 04:58 PM | Billy | 0 Comments   

At the beginning of the week, Yahoo was attacked by a worm that propagates using nothing but JavaScript and Ajax. I've been giving interviews to the press all day and talked with the FBI about the worm, so let me take a moment to fill you all in. Read More...

Filed under: XSS Ajax, worm, malware

Attachment(s): Yamanner.js - ROT13.txt