Web Hack List

Collected research

PXSS on long length videos to DOS

Researchers Uncover Interesting Browser-Based Botnet

Incapsula traced a DDoS to stored XSS on a major video site: script hidden in a commenter's profile image ran for every viewer and opened a hidden iframe to the attacker's control domain, making each browser issue a request per second at a target. Comments on hundreds of long, popular videos turned visitors into a browser botnet.

Record

Document
Researchers Uncover Interesting Browser-Based Botnet
Researcher
Dennis Fisher
Published by
Threatpost | The first stop for security news
Date
Topic
Other

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of Dennis Fisher, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .