Other nomination

Popup & Focus URL Hijacking

A snippet replaces the page shortly after load, so the address bar a user checked no longer matches what they see. Applied to a download prompt, a page posing as addons.mozilla.org triggers a Firefox add-on install dialog that names ha.ckers.org as the source, and blocks the legitimate download until the user acts.

In the archive

• Nominated for the 2009 Top 10 Web Hacking Techniques
• Nominated for the 2010 Top 10 Web Hacking Techniques

Related sources

• Research demonstration

Tags

• ui-redress
• javascript
• browser-extension
• attack-chain
• url-spoofing
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.