Tuesday, February 08, 2005

[H]ard|OCP: Shmoo Group Finds Exploit, affects all browsers except IE

[H]ard|OCP: "Shmoo Group Finds Exploit: A huge exploit for all browsers except IE has been found during the East Coast hacker convention Shmoocon. Details can be found here, including examples: Proof of concept URL: http://www.shmoo.com/idn/ Clicking on any of the two links in the above webpage using anything but IE should result in a spoofed paypal.com webpage. This is one example URL - - there are now many ways to display any domain name on a browser, as there are a huge number of codepages/scripts which look very similar to latin charsets."

No comments: