Other nomination

Stealing entire Auto-Complete data in Google Chrome

lava

Chrome's autocomplete dropdown is not in the DOM, so script cannot read it. The trick is to place a 3px-wide input just above the resting mouse pointer so the suggestion list appears under it, camouflaged as a thin strip. A fake reaction game gets the victim to press Enter repeatedly, each press committing one suggestion into the input where JavaScript reads it.

Record

Researcher

lava

In the archive

• Nominated for the 2010 Top 10 Web Hacking Techniques

Related sources

• Earlier demonstration
• Companion demonstration
• Demonstration video

Tags

• info-leak
• javascript
• dom
• css
• ui-redress
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of lava, first published at the original source. Preserved copies are kept so the citation survives its host.