Submit Search
HTML Binary Hacks & GIF89a Ployglot
Download as PPT, PDF
4 likes
4,703 views
takesako
http://conferences.yapcasia.org/ya2008/talk/1299
Technology
Entertainment & Humor
Read more
1 of 27
Download now
Downloaded 45 times
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
More Related Content
PPTX
2013 e guidebook
Hanson1010
PDF
Youth Tactical Training
Raúl Oliveira
PPT
4887867.ppt
CnhVVn1
PDF
DOCUMENTOS FIFA - 10 - EL JUGADOR DE MAÑANA
Diego Menino
DOC
Football Coaches Weekend and Weekly Schedule
Derek Fitzhenry
PPTX
Soccer drills
sp32unc32
PDF
US Youth Soccer Practice Activities (U10)
Matthew Pearson
PDF
US Youth Soccer Practice Activities (U12)
Matthew Pearson
2013 e guidebook
Hanson1010
Youth Tactical Training
Raúl Oliveira
4887867.ppt
CnhVVn1
DOCUMENTOS FIFA - 10 - EL JUGADOR DE MAÑANA
Diego Menino
Football Coaches Weekend and Weekly Schedule
Derek Fitzhenry
Soccer drills
sp32unc32
US Youth Soccer Practice Activities (U10)
Matthew Pearson
US Youth Soccer Practice Activities (U12)
Matthew Pearson
Viewers also liked
(6)
PDF
HTML5 for Security Folks
Vaibhav Gupta
PPTX
Application Security Vulnerabilities: OWASP Top 10 -2007
Vaibhav Gupta
PPT
OAuth 2.0 & Security Considerations
Vaibhav Gupta
PPTX
Application Security Risk Rating
Vaibhav Gupta
PDF
Security Automation using ZAP
Vaibhav Gupta
PDF
Polyglot payloads in practice by avlidienbrunn at HackPra
Mathias Karlsson
HTML5 for Security Folks
Vaibhav Gupta
Application Security Vulnerabilities: OWASP Top 10 -2007
Vaibhav Gupta
OAuth 2.0 & Security Considerations
Vaibhav Gupta
Application Security Risk Rating
Vaibhav Gupta
Security Automation using ZAP
Vaibhav Gupta
Polyglot payloads in practice by avlidienbrunn at HackPra
Mathias Karlsson
More from takesako
(19)
PDF
SECCON CTF セキュリティ競技会コンテスト開催について
takesako
PDF
Acme minechan
takesako
PDF
Acme::MineChan LT demo
takesako
PPTX
Node.js - JavaScript Thread Programming
takesako
PPTX
Node.js - sleep sort algorithm
takesako
PPTX
x86x64 SSE4.2 POPCNT
takesako
PPTX
再帰的 正規表現JSON Validator
takesako
PDF
正規表現‐もう一つのバベルの塔‐木村浩一
takesako
PDF
Perl6 Regex Programming with Rakudo
takesako
PDF
That Goes Without Alpha-Num (or Does It ?) all your base10 are belong to us
takesako
PDF
Devsumi2010 Ecmascript5 (ISO/IEC JTC1/SC22)
takesako
PDF
Perl x86 JIT Programming
takesako
PPT
YAPC::Asia 2008 Closing Ceremony
takesako
PDF
Devsumi2008 - YAPC::Asia 2008 Tokyo
takesako
PPT
GIF89a Oldtype
takesako
PPT
Shibuyajs Digest
takesako
PPT
HTML2.0 - digg - OSC2007-fall
takesako
PPT
Shibuya.pm#8 - ImageFight - HTML 2.0 New Browser Detection
takesako
PPT
Shibuyajs24 JavaScript.GIF x LiveConnect
takesako
SECCON CTF セキュリティ競技会コンテスト開催について
takesako
Acme minechan
takesako
Acme::MineChan LT demo
takesako
Node.js - JavaScript Thread Programming
takesako
Node.js - sleep sort algorithm
takesako
x86x64 SSE4.2 POPCNT
takesako
再帰的 正規表現JSON Validator
takesako
正規表現‐もう一つのバベルの塔‐木村浩一
takesako
Perl6 Regex Programming with Rakudo
takesako
That Goes Without Alpha-Num (or Does It ?) all your base10 are belong to us
takesako
Devsumi2010 Ecmascript5 (ISO/IEC JTC1/SC22)
takesako
Perl x86 JIT Programming
takesako
YAPC::Asia 2008 Closing Ceremony
takesako
Devsumi2008 - YAPC::Asia 2008 Tokyo
takesako
GIF89a Oldtype
takesako
Shibuyajs Digest
takesako
HTML2.0 - digg - OSC2007-fall
takesako
Shibuya.pm#8 - ImageFight - HTML 2.0 New Browser Detection
takesako
Shibuyajs24 JavaScript.GIF x LiveConnect
takesako
HTML Binary Hacks & GIF89a Ployglot
1.
HTML Binary Hacks
- GIF89a Polyglot - Cybozu Labs, Inc. TAKESAKO <takesako@shibuya.pm.prg>
2.
I’ll show you,
HTML 2.0 hacks.
3.
1.0 HTML Browser
Detection
4.
HTML Quiz <img
src=”1.gif” src=”2.gif”> (1) 1.gif (2) 2.gif (3) N/A Answers. Q1. What will you see? (on your browser)
5.
Q2. What’s this?
<img /src = ”1.gif” ”” src{\x00} = ”2.gif” ’ src{\x0c} = ”3.gif” src = ”4.gif” /> (1) 1.gif (2) 2.gif (3) 3.gif (4) 4.gif Answers. -> ie -> Safari -> firefox -> others
6.
7.
print<<EOF; <img /src
\x00 ="ie.gif" /''src \x00 ="firefox1_5.gif" /''src="firefox2_0.gif" /""src="gecko_others.gif" "s \x00 rc="safari2.gif" "src="safari3.gif" ""src="konqueror.gif" src \x00 ="w3m.gif" src \x0c ="opera.gif" src="others.gif" src="lynx.gif" /> EOF
8.
http://wafful.org Demo
9.
10.
It can detect
“Konqueror”, “Safari2” !
11.
No JavaScript &
No CSS hacks
12.
lynx
13.
w3m
14.
Mozilla/5.0 (PLAYSTATION 3;
1.00) others.gif
15.
16.
1.0 The End
17.
2.0 GIF89a Polyglot
18.
Animation GIF image
Yappoc.gif
19.
どう見ても Yappo です
本当にありがとう ございました(ry
20.
Polyglot DEMO HTML/CSS
& JS & Perl & GIF89a
21.
JavaScript in GIF
GIF89a( q /*....../);sub GIF89a{print "Hello Perl!"} __END__#*/ =1 );function GIF89a(){alert("Hello JavaScrpt!")} /*<body style=visibility:hidden> <div style=position:relative;visibility:visible> <h1>Hello HTML!</h1><!-- ................................................ ................................................ ................................................ ................................................ --><img src=?> <script src=# language=JavaScript></script></div> */ // ;
22.
HTML/CSS in GIF
GIF89a(q/*....../);sub GIF89a{print "Hello Perl!"} __END__#*/=1);function GIF89a(){alert("Hello JavaScrpt!")} /* <body style=visibility:hidden> <div style=position:relative;visibility:visible> <h1>Hello HTML!</h1> <!-- ................................................ ................................................ ................................................ ................................................ --> <img src=?> <script src=# language=JavaScript></script> </div> */// ;
23.
Perl in GIF
GIF89a(q /*....../ );sub GIF89a{print "Hello Perl!"} __END__ #*/=1);function GIF89a(){alert("Hello JavaScrpt!")} /*<body style=visibility:hidden> <div style=position:relative;visibility:visible> <h1>Hello HTML!</h1><!-- ................................................ ................................................ ................................................ ................................................ --><img src=?> <script src=# language=JavaScript></script></div> */// ;
24.
Demo
25.
26.
27.
Thank you
Download