The Browser Hacker's Handbook

Index

A

Accept header, fingerprinting and, 250–252

ActionScript, 401

ActiveFax exploitation

BeEF bind, 590–592

IPE (Inter-protocol Exploitation), 574–579

ActiveX, 372

plugins, 403

exploiting ActiveX, 404–408

VLC, media plugin attacks, 410–413

addEventListener( ) function, 188

add-ons, versus extensions, 313

Adobe Flash, SOP, bypassing, 141–142

Adobe Reader, SOP, bypassing, 140–141

advertising networks, 46–47

AJAX

calls, hijacking, 106–107

MitB (Man-in-the-Browser) techniques, 104–110

non-AJAX requests, hijacking, 107–110

Allow-Access-From-Origin:, 596

Android phones, scheme abuse, 281–283

Android Web Market XSS flaw, 33

anonymization, bypassing, 231–234

anonymous functions, 83

anti-phishing controls, 58–59

applets

Java

plugins, 388–389

reversing, 391–395

signed, 223–228

ARP (Address Resolution Protocol), spoofing, 64–70

ARP Spoofing, 272–273

attachApplet( ) function, 530

attachEvent( ) function, 188

attack surface, 17–18

extensions, 19

plugins, 19–20

rate of change, 18

silent updating, 18–19

AttackAPI, 537–539

attacks

browsers, 26–27

extensions, 26

networks, 27

plugins, 27

users, 26

web applications, 27

XSS (Cross-Site Scripting), 32–33

Attempt Change button, 269–270

authentication

pre-authentication RCe, 503–504

web app attacks, 436–440

authentication detection, web app attacks, 436–440

AVM (ActionScript Virtual Machine), 401

avpop( ) function, 215

B

BackFrame, 151–152

background page, extensions, 325

baiting for phishing attacks, 57–58

Base64 encoding, detection evasion, 111 ...