Other nomination
Inter Protocol Exploitation
RSnake's write-up of Wade Alcorn's Inter Protocol Exploitation paper. A browser can be driven to speak a non-HTTP protocol to an intranet service, and the traffic it carries can be a working buffer overflow, demonstrated against an Asterisk VoIP server rather than only a toy socket listener. It puts Metasploit-style exploitation behind XSS.
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.