Posts
Disclosing Tor users' real IP address through 301 HTTP Redirect Cache Poisoning
This blog post describes an example practical application of the 'HTTP 301 Cache Poisoning' attack that can be used by a malicious Tor exit node to disclose real IP address of chosen clients.
Permanent URL Hijack Through 301 HTTP Redirect Cache Poisoning
This blog post describes an interesting technique of abusing the standard HTTP 301 responses ("Permanent redirect") to poison browser cache and achieve endpoint persistence for chosen non-TLS resources.
Client Domain Hooking - Example Attack
In my last blog post I have released a paper that described all relevant technical aspects of the 'Client Domain Hooking', along with a HTTP Strict Transport Security (HSTS) survey made for the TOP 1000 Alexa websites.
Hijacking browser TLS traffic through Client Domain Hooking
I am releasing a paper that describes a new variation of a man-in-the-middle (MITM) technique which, under certain circumstances, allows to permanently hijack browsers encrypted HTTP communication channel flow and compromise its confidentiality and integrity.
Phishing NG. Bypassing 2FA with Modlishka.
This blog post is an introduction to the reverse proxy "Modlishka" tool, that I have just released.