The innerHTML Apocalypse

This talk introduces and discusses a novel, mostly unpublished technique to successfully attack websites that are applied with state-of-the-art XSS protection. This attack labeled Mutation-XSS (mXSS) is capable of bypassing high-end filter systems by utilizing the browser and its unknown capabilities - every single f***** one of them. We analyzed the type and number of high-profile websites and ap

[efcl]

mXSS(mutations XSS) Inに対しての不思議なOut X-UA-Compatibleで昔の再現…

[hasegawayosuke]

おもしろい。終わりの始まりを作ったの実は俺だった、みたいな話。