xmlHttpFingerprint - Remote OS fingerprinting through xmlHttpRequests

Posted by SkyLined on October 31st, 2008 in and · 2 Comments

Dan Crowley recently released a paper (txt, pdf) describing how web servers installed on various Operating Systems (OS) respond differently to certain requests depending on which OS they are installed on…

StumbleUpon XSS

Posted by SkyLined on August 12th, 2008 in and · 0 Comments

I discovered a type 1 XSS issue in the StumbleUpon website. Input in the POST form at http://www.stumbleupon.com/delete_account.php was not properly sanitized…

ASCII Art

Posted by SkyLined on August 3rd, 2008 in and · 0 Comments

I’ve put some of the ASCII Art I’ve created over the years online here. This includes never before publicly released ASCII Art shellcode.

Safari vulnerability

Posted by SkyLined on July 14th, 2008 in and · 0 Comments

Apple has released a patch for a remote code execution vulnerability that I reported to them…