Inline UTF-7 E4X javascript hijacking - The Spanner

Published: Tue, 24 Feb 2009 11:27:19 GMT Updated: Wed, 02 Jul 2025 20:02:07 GMT Read time: ⏱️ 2 min read I finally get to talk about this because Yosuke Hasegawa has already disclosed the IE/FF variant with JSON data. I also discovered the UTF-7 JSON hacking independently but I wasn't aware it was public so I didn't blog about it. Just in case you haven't, you should check out his presentation it'

[mooz]

exploit code をUTF-7 でデコードして仕込む. E4X として解釈させて情報を入手.

[TAKESAKO]

Yosuke Hasegawa !!! http://www.thespanner.co.uk/2009/02/26/hackvertor-now-translates/

[hasegawayosuke]

この手法は秘密にしてたのに、ばれてしまったｗ