Browse by Tags - HP Application Security Center Community
United States-English

Browse by Tags


» XSS+phishing in Italian bank hack

Netcraft is reporting today about a phishing attack leveraging XSS against an Italian bank. From the article (emphasis mine) An extremely convincing phishing attack is using a cross-site scripting vulnerability on an Italian Bank's own website to attempt to steal customers' bank account details...
Posted to The HP Security Laboratory (Weblog) by Billy on 01-10-2008

» Phree Phishing

I recently blogged about the phishing pages that I found during a Tour of the Google Blacklist . In that posting I noted how I was surprised to find that Yahoo! was actually hosting phishing sites designed to phish Yahoo! credentials. Not surprisingly, Yahoo! quickly removed the pages that I'd pointed...
Posted to Michael Sutton's Blog (Weblog) by erik.peterson on 02-09-2007

» Security zone shortcomings: why browsers and websites encourage phishing

Hello everyone. Since this is my first blog post, an introduction is warranted. My name is Jeff Forristal, and I'm a recent addition to the SPI Labs team at SPI Dynamics. I came to SPI from a security services company, and have almost a decade of security experience--particularly in the web arena...

» A Tour of the Google Blacklist

[Update 01.10.07: In response to some of the queries that I've been receiving, I've published a follow up blog to discuss the structure/decryption algorithm of Google's Encoded/Hashed Blacklist .] I recently decided to devote a day to walking through the Google Blacklist . While some of the...
Posted to Michael Sutton's Blog (Weblog) by erik.peterson on 01-04-2007
Page 1 of 1 (4 items)
Information disclosed in this community becomes public. Exercise caution when deciding to disclose your personal information. HP reserves the right, but is not obligated to, edit or remove your comment if it contains personally identifiable information or other content HP deems unacceptable.  Opinions expressed are your personal opinions or those of the original authors, and not of HP. Please see HP's web Terms of Use for more details.