The last week I had very much to do and now this week I’m ill and have a temperature. Yes, the world’s hard but don’t worry I’m alive and the title of this blog posting has nothing to do with my ill health, so let’s start talking about things that matters.
pdp wrote an interesting blog [...]

A few days ago I read the blog of Romain Gaucher and came across a very simple way of execute Javascript. He wrote there about how to inject a Javascript into an SVG image. It’s not a new technique at all because the SVG format is nothing else then XML and there you can use [...]

Yesterday I was on a meeting of the OWASP Switzerland Local Chapter and had a presentation about XSS-Worms there. I already had such a presentation in the past at the Cosin06 but I did a complete renew of the presentation and it seems that the content is interesting when I look at the good feedbacks [...]

A few days ago I had some time left to have a look at Python (no I’m not talking about the snake ). I tried to get time for that for months and now it happened and because Python is really good for network programming stuff I remembered a friend of mine who asked [...]

Just a hint: For some people the following blog entry can look like absolute nonsense

Some time ago a working colleague of mine asked my, why Cross Site Scripting is called this way because all he’s seen about it was to inject some own script in a web application but where is the “Cross [...]

I just had a look at Kaneda’s website where I’ve found a really cool advisory about how to bypass the phishing filter of Firefox 2.0.0.1 (don’t know what’s about older versions) in a extremely simple way. When you add a “/” character somewhere where already is one so that there are two of them “//” [...]

I had holidays for a week and was Snowboarding in the mountains of Switzerland and enjoyed the sun but now I’m back and hey, there was much cool stuff going on this week and so I’ve to write at least one blog entry about one thing happened this week.
Once more Jeremiah Grossman wrote a very [...]