Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Browsers :: b06-1410.htm

Internet Explorer Address Bar spoof



Another way to spoof Internet Explorer Address Bar
Another way to spoof Internet Explorer Address Bar



DESCRIPTION
Attacker alse can spoof the address bar with another HTML page instead of the shockwave-flash file by continuing make to window.location
If you use a very large SWF file, the last page will be display as long as SWF loading time with the original address bar.
This exploit code will try to display www.microsoft.com with address bar of www.google.com 

########### LukesTest2.htm ###########
Perform the second Test
################################## The SWF will be displayed when it is loaded fully as well as my first sample code. SOLUTION: Disable Shockwave-Flash ActiveX Control


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH