Tech | March 12, 2010 | 0 comments

Using Parameter Pollution and Clickjacking to Aid Anti-CSRF Bypass

Image
Paisano1
It’s been a while since I’ve talked about Clickjacking, with only a few exceptions here and there. Mostly because I haven’t seen it much in the wild - at least not yet. But there’s still a lot of research out there to be done. I got an interesting email the other day that talked about a way to use parameter pollution (or a mix of URL parameters and POST) to create a condition where you can defeat CSRF tokens...

https://www.infosecisland.com/articleview/3256-Using-Parameter-Pollution-and-Cli...
  1. groups:
    Community,   Tech,   Current Tonight
  2. tags:
    Government,  Financial,  Hackers,  National Security,  20 more
  3.     
    |

0 comments // Using Parameter Pollution and Clickjacking to Aid Anti-CSRF Bypass

more from Tech:
from the community

top videos