Lifedork

When I was reading d0ubl3_h3lix’s security paper about Web Browser Plugins Vulnerabilities , I found out that there’s a Mozilla Firefox extension to prevent the execution of XSS threats that I’ve never tried before (because I only used FireKeeper before ) the extension itself ’s called ‘XSS Warning’ .

The further informations about this Mozilla Firefox Security extension :

Taken from http://www.zeropaid.com/bbs/archive/index.php/t-42967.html:
In the spirit of beta testing, I was sent a link from Gianni Amato on a new extension he’s written for Firefox called XSS Warning. Unsurprisingly, it warns you of potential XSS attacks on the URL string with a large blocking page. I have not spent a tremendous amount of time playing with this, but I had a few thoughts. Granted this is experimental, so I’m not trying to rip into it, because it definitely provides a service. But here are some thoughts.

Firstly, it only works in the case of reflected XSS. While that’s the most common form of XSS, it’s also only one form. Secondly, because it doesn’t generate an alert box, if the XSS is loaded inside of a hidden iframe, the user would never be warned that it failed (also making it easy to check for, incidentally). So while I love this research, and I want a lot more of it, this shouldn’t be considered a panacea, although I think we are well on our way now that we finally have people like Gianni and Giorgio looking at this. Very cool, and I encourage everyone to check it out.

Taken from the official website of XSS Warning :
XSS Warning is a extension for Firefox that fitre malicious values to prevent - with Javascript allowed - the Cross Site Scripting (XSS) attacks by malicious Http Request.

XSS Warning 0.3.4 protect from:

# Url attack

# Iframe attack

# Http request attack

This extension is compatible with Firefox 1.5 - 2.0.0.*
Install the latest release of XSS Warning right here !

XSS Warning - XSS Prevention Extension for Mozilla Firefox is posted on April 17th, 2008 by admin. This post is filed under: Sectools, Security .

Some people come to this post with this search term: extension, hacking friendster xss attack, prevention method for Reflected XSS Attacks, prevention method, Reflected XSS Attacks, http://itgossips.com, hack friendster mozilla firefox, friendster +xss, how to use BSQL tool, site:http://www.lifedork.com/, Mozilla FireFox Xss iframe, view private profile on friendster using javascript, mozilla firefox friendster, friendster xss, XSS Warning, XSS Warning source code, xss attack mozilla, prevent hack of friendster, xss checker plugin for firefox, HACK FACEBOOK WITH MOZILLA 1.5, how to use mozilla to hack into facebook,

And here is the related entries of this post:

• Technika Security Framework , Hackbar 1.1.1 : Mozilla Firefox Plugins for hacking purposes
• Access-Me 0.1 Released !
• Firekeeper : Turn FireFox into an Intrustion Detection System
• SWFintruder , testing security in Flash movies
• Sql Playground 3 - Get Familiar with Sql Injection Attack Environment!