signed

A Different Form of JAR Hell
In my last post I used a Java applet to steal password hashes. Part two, covering NTLMv2, is on its way. Today however, I'm going to discuss SunSolve #233323 - a vulnerability ...

Repurposing Attacks Against Java Applets
If you read my review of the Web Application Hacker's Handbook you may remember I made the following point:The authors talk about repurposing ActiveX controls but do not mention that this also ...