Later archive addition

Google Search API Worms

pdp (Petko D. Petkov) · GNUCITIZEN

Explains how a browser script can use callback-delivered search results to discover targets across origins without a separate discovery proxy. The proposed worm architecture combines query diversification, browser execution and existing injection or cross-origin request techniques; the search API supplies discovery rather than an authentication bypass.

Record

Researcher

pdp (Petko D. Petkov)

Published by

GNUCITIZEN

In the archive

• Added to the 2006 archive after the original list was published

Tags

• javascript
• xss
• csrf
• same-origin-policy
• owasp-a01-2021
• owasp-a03-2021

This page is the archive's own catalogue record. The research is the work of pdp (Petko D. Petkov), first published at the original source. Preserved copies are kept so the citation survives its host.