Saturday, April 17, 2010

Security researcher warns of new clickjacking threat

A tool has been launched at the Black Hat security conference in Barcelona designed to highlight the increasing dangers of clickjacking, a hacking technique that fools users in to clicking on elements hidden in an iframe.

The browser-based tool was developed by security consultancy Context to " experiment with click-jacking techniques", and was introduced at the Black Hat event by Context developer Paul Stone.

Clickjacking was first seen in 2008, but was considered of limited use to hackers compared to other browser-based attacks, such as cross-site scripting and cross-site request forgery. However, Stone believes that the clickjacking threat is now much more real.

"Today's click-jacking techniques can be extended to perform powerful new attacks that can affect any web application," he said.

The new tool demonstrates the text-field injection and content extraction techniques, has a hidden mode that simulates a real clickjacking attack and lets users visualise how it works.

Stone demonstrated some updated clickjacking techniques that highlighted vulnerabilities in Internet Explorer, Firefox, Safari and Chrome.

"The tool will highlight the need for improved clickjacking defences in browsers and web applications," warned Stone.

The tool is in early beta and works best on Firefox 3.6.

2 comments:

  1. Every single time you give a speech at a convention or maybe participate in lunch speak with associates,
    creating mention of your twitter website link is just a slick way of persuading them to follow you.
    -Once you build up a relationship with your followers, ask them to recommend your profile to their friends and other users and offer to do the same for them.
    Friendfactor responded to Adam Lambert with a tweet of its own:.


    Feel free to surf to my webpage ... Epic Followers

    ReplyDelete
  2. These oils have been tested and proven to be effective against
    a variety of warts. As a word of caution you should also never try to manually remove the warts yourself, as that can lead to the virus spreading.
    Extended hair can cause your physique pimples to get worse if you do not
    wash it typically, and make confident that it is genuinely cleanse.



    My website how to get rid of warts around fingernails

    ReplyDelete