Other nomination

HOW TO: Spy on the Webcams of Your Website Visitors

Feross Aboukhadijeh · Feross.org

Adobe had added framebusting JavaScript to the Flash Settings Manager page, so instead of framing the page the author framed the settings SWF file directly, which the framebuster never guarded. Overlaying the transparent SWF on a game made visitors' clicks silently grant webcam and microphone access. Shown in Firefox and Safari for Mac; Adobe fixed it in days.

Record

Researcher

Feross Aboukhadijeh

Published by

Feross.org

In the archive

• Nominated for the 2011 Top 10 Web Hacking Techniques

Related sources

• Live demonstration
• Demonstration source
• Demonstration video

Tags

• clickjacking
• ui-redress
• flash
• iframe
• filter-bypass
• case-study
• owasp-a04-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of Feross Aboukhadijeh, first published at the original source. Preserved copies are kept so the citation survives its host.