Web Hack List

Other nomination

The Attack of the TINY URLs

pdp turns TinyURL into remote storage for a self-contained AJAX worm: split the payload, base64 each segment, shrink every segment and the index with TinyURL, and 26 characters expand back into a large file. Retrieval loads each short URL in an iframe that writes its segment into the parent's fragment identifier, so the worm needs no server a defender can take down.

Record

Researcher
pdp

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of pdp, first published at the original source. Preserved copies are kept so the citation survives its host.