-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On Tue, 24 Oct 2006 08:45:35 -0500 [EMAIL PROTECTED] wrote: >for phsihing and phile downloading specially when server from >"location: I don't know" :) this is kind of cool normally used for > >base64 inline images I think ? Firefox 2.0 and Opera 9.02 you can >invoke the apps and play from there check .asx in temp with >foo.asf >maybe you can do some things else > ><a >href="data:image/gif;base64,R0lGODlhFQAVAMQAAADMMwLMNRDPQMry1C3UVlT >b >dW3giZvprfb69hDIADnM >Kje5AEqPAGfBALzFAOvKAKmNAMDAwP3KAPrJAPnHAOy9AMukAGtXAAAAAAAA >AAAAAAAAAAAAAAAAAAAAAAAAACH5BAEAABEALAAAAAAVABUAQAXKYCSOozSd >k0SSVQK8BSLPyGAAyWWJUmVBlwtjkUgsGMEgxFIZTRqwwaEgeFkbzImoAnEB >YjIbwZrTrSISSmXNXlNU58ij4bXisBXtiAKF0WwCAgEADExbC1Zgf1QACxcQ >Wz+IBVJjdkiPO04+P0lJS1lxEg4NREYNDhVvcQ+TBgSDdguhPA5eYGJVLwlL >TREViH5/U1ULS1t1ijQINzmaFX1fywcEgoSPkQzCU7EvmJpqFkIKVN0JmDq+ >ERM+QJ7vvXqbnD+gTHkiIQA7">test</a> > ><a >href="data:application/hta;7bit,<script>alert()</script>">test</a> > ><a href="data:text/xml;7bit,''><img>try inject >">test</a> > ><a href="data:text/html;7bit,<img >src=http://ie7.com/firefox.jpg>">test</a> > ><a href="data:application/pdf;7bit,foo.pdf">test</a> > ><a href="data:application/x-shockwave-flash;7bit,foo.swf">test</a> > ><a href="data:video/x-ms-asf;7bit,foo.asf">test</a> > ><a href="data:application/zip;7bit,foo.zip">test</a> > ><a href="data:video/quicktime;7bit,foo.mov">test</a> > > >-- > > > >Concerned about your privacy? Instantly send FREE secure email, no >account required >http://www.hushmail.com/send?l=480 > >Get the best prices on SSL certificates from Hushmail >https://www.hushssl.com?l=485 > >_______________________________________________ >Full-Disclosure - We believe in it. >Charter: http://lists.grok.org.uk/full-disclosure-charter.html >Hosted and sponsored by Secunia - http://secunia.com/ sweet! time to do some myspace phishing! -----BEGIN PGP SIGNATURE----- Note: This signature can be verified at https://www.hushtools.com/verify Version: Hush 2.5 wpwEAQECAAYFAkU+RwUACgkQsGS6s78KOsVXawP/aE32fcfCqnBKTDjSSVRZRo7U8BbW UzhQFt/j9c2L18KoVoCmy9YYYPmkdHFc7nJPei4IEQ2LnaeBCdoUd79AVROjN+O6pNWS 0Fp8si7o5xwONjR+mEyTEv3aoKa5lndO7W14pqJYD2MCYnyKiJQx9Cx8FZyTHkzElJXf 3d3c7aA= =6AD7 -----END PGP SIGNATURE----- Concerned about your privacy? Instantly send FREE secure email, no account required http://www.hushmail.com/send?l=480 Get the best prices on SSL certificates from Hushmail https://www.hushssl.com?l=485 _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
