Web Hack List

Collected research

LocalRodeo Detection

LocalRodeo Detection ha.ckers.org web application security lab

RSnake shows Martin Johns's LocalRodeo Firefox extension can be fingerprinted: because it blocks connections to localhost, neither onload nor onerror fires on an image pointed there, while the DOM is left unmodified. Detection is framed as recon - knowing what security software a target runs tells an attacker what not to attempt.

Record

Document
LocalRodeo Detection ha.ckers.org web application security lab
Published by
ha.ckers.org
Topic
Other

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of ha.ckers.org, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .