Final Fifteen - Web Hacking Techniques

Final Fifteen

• A Twitter DomXss, a wrong fix and something more
• Attacking HTTPS with Cache Injection
• Breaking into a WPA network with a webpage
• Bypassing CSRF protections with ClickJacking and HTTP Parameter Pollution
• CSS History Hack In Firefox Without JavaScript for Intranet Portscanning
• Cross Site URL Hijacking by using Error Object in Mozilla Firefox
• Evercookie
• HTTP POST DoS
• Hacking Auto-Complete (Safari v1, Safari v2 TabHack,Firefox, Internet Explorer)
• Java Applet DNS Rebinding
  
• JavaSnoop
• NAT Pinning: Penetrating routers and firewalls from a web page
• Next Generation Clickjacking
• 'Padding Oracle' Crypto Attack (poet, Padbuster, demo,ASP.NET)
• Universal XSS in IE8 (CVE, White Paper)

http://jeremiahgrossman.blogspot.com/2011/01/final-fifteen-web-hacking-techniques.html