back to article Yahoo! email! hijack! exploit!... Yours! for! $700!

A cross-site scripting (XSS) flaw on Yahoo! Mail creates a means to steal cookies and hijack accounts, according to a hacker who is offering to sell an alleged zero-day vulnerability exploit for $700. The cybercrook, who uses the online nickname TheHell, knocked up a video to market the exploit which he is attempting to sell …

COMMENTS

This topic is closed for new posts.
  1. s0beit
    Coat

    Well, seems like there's one way...

    Maybe I'm being silly, but I think if they searched their database for an account emails similar to his they'd probably find it. Not sure if that would violate some privacy laws though.

  2. Anonymous Coward
    FAIL

    I wonder if the video showed enough of the URL to nail him

    I'm sure they have logs with those GUID-type ids saved.

  3. matcohen

    XSS Is a Hassle

    Given the large number of potential instantiations of XSS, it can be tricky to discover all potential attacks. Finding them in AJAX heavy web applications can be even more difficult.

    Best,

    Matthew Cohen

    www.ntobjectives.com

This topic is closed for new posts.

Biting the hand that feeds IT © 1998–2020