Top 10 winner

Hacking Auto-Complete

Jeremiah Grossman · blog.jeremiahgrossman.com

Index post releasing the materials for the Black Hat USA 2010 talk on abusing browser form autocomplete and autofill. It links the slide deck and the individual writeups: Safari AutoFill disclosure (CVE-2010-1796), IE6/7 AutoComplete theft, Firefox autocomplete spoofing, password manager theft via XSS, and cookie eviction across all sites.

Record

Researcher

Jeremiah Grossman

Published by

blog.jeremiahgrossman.com

In the archive

• Ranked #3 in the 2010 Top 10 Web Hacking Techniques

Related sources

• Safari
• Safari v2 TabHack
• Firefox
• Internet Explorer
• Complete Black Hat slides
• Original demonstration
• Follow-up demonstration
• Companion demonstration

Tags

• info-leak
• javascript
• cookie
• cve
• xss
• owasp-a03-2021
• owasp-a07-2021

This page is the archive's own catalogue record. The research is the work of Jeremiah Grossman, first published at the original source. Preserved copies are kept so the citation survives its host.