Other nomination

Hyperlink Spoofing and the Modern Web

David Ross · blogs.msdn.com

Ross surveys how social platforms display hyperlink destinations and finds the indicators are inconsistent and spoofable. Twitter's server-side short-link resolution created a TOCTOU window: change the redirector after the tweet is posted and the displayed target no longer matches where the click goes. He tests five anonymised platforms plus McAf.ee and proposes pinning resolved destinations.

Record

Researcher

David Ross

Published by

blogs.msdn.com

In the archive

• Nominated for the 2012 Top 10 Web Hacking Techniques

Related sources

• paper

Tags

• open-redirect
• url-parsing
• toctou
• measurement-study
• http
• mitigation
• info-leak
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of David Ross, first published at the original source. Preserved copies are kept so the citation survives its host.