Web Hack List

Collected research

Stealing Pictures with Picasa

Billy (BK) Rios

A short release note pointing at the Picasa exploit write-up and its source code. Google's Picasa registers the picasa:// URI in the Windows registry, and a cross-site scripting exposure can drive that registered handler to steal a victim's images. Published by McFeters to mark the authors' Black Hat Japan acceptance.

Record

Document
Billy (BK) Rios
Researcher
Nate McFeters
Published by
xs-sniper.com
Topic
Other

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of Nate McFeters, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .