bugtraq
[Top] [All Lists]

Re: Bypass phishing protection in Firefox / Opera

To: bugtraq@securityfocus.com
Subject: Re: Bypass phishing protection in Firefox / Opera
From: "Łukasz Pilorz" <lukasz@pilorz.net>
Date: Fri, 30 Mar 2007 10:11:34 +0200
Delivered-to: sp-com-lists@consult.net
Delivered-to: bugtraq-list@securepoint.com
Delivered-to: mailing list bugtraq@securityfocus.com
Delivered-to: moderator for bugtraq@securityfocus.com
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:sender:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition:x-google-sender-auth; b=YQjqzknlfB1aRiI9G+sdlXe290GMntbveC5YHGpfgUX6T8kVKsN0mOB2jq2KeRts/ZY2ha2+Lz3vshzH5nbWzi92Mxf8FmIuVQu4H9UWpADPfufb9ALTDJTosRoD+HHzbNGuxSFgmG2ZDZYGv+oosjoCt7SQPNR/D5F422kpBek=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:sender:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition:x-google-sender-auth; b=AlAbcf5UWVhxSsUksPg0GWB/fMDj9q2FxS7a1E1U2nKBMlpy4YXwPC8I8LOze1Rr7YsDleHHBcN+jhLDsgbh4rPlkLsvCr0APYByKtD85ynEQ3y6RarhLKKIiN0hCoXo9hMB4UVfJp+d7ODx5d5L5SpbZOHT7hk2alqrjg0Rnj0=
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@securityfocus.com; run by ezmlm
Sender: lpilorz@gmail.com
It seems that simply adding "?" at the end bypasses Firefox phishing
protection, but I didn't test it much.

<Prev in Thread] Current Thread [Next in Thread>