Web Hack List

Collected research

The Attack of the TINY URLs

pdp turns TinyURL into remote storage for a self-contained AJAX worm: split the payload, base64 each segment, shrink every segment and the index with TinyURL, and 26 characters expand back into a large file. Retrieval loads each short URL in an iframe that writes its segment into the parent's fragment identifier, so the worm needs no server a defender can take down.

Record

Researcher
pdp
Published by
gnucitizen.org
Topic
Other

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of pdp, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .