Top 10 winner
GIFAR
How to Create a GIFAR
A short writeup of the GIFAR, the GIF-plus-JAR polyglot Billy Rios and Nathan McFeters showed at Black Hat 2008. Because GIF headers sit at the front of a file and ZIP central directories at the end, one file passes as an image on upload and still loads as a signed applet, running in the hosting site's origin and defeating the same-origin policy.
Record
- Document
- How to Create a GIFAR
- Researcher
- Christopher
- Published by
- RioSec
- Date
- Topic
- Other
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Christopher, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .