Egor Homakov

From official doc on Cross Origin Resource Sharing A  header  is said to be a  simple header  if the header field name is an  ASCII case-...

TL;DR Every website with "Connect Facebook account and log in with it" is vulnerable to account hijacking. Every website relying o...

Try to run this simple app: require 'sinatra' get '/' do   redirect params[:to] if params[:to].start_with? 'http://...

TL;DR I can craft a page "polluting" CDNs, blogging platforms and other major networks with my cookies. Your browser will k...

If it wasn't MtGox I wouldn't even mention it — XSS/fixation/etc are web sec routines, and are not worth a blog post. But it *is* ...

TL;DR ///host.com is parsed as relative-path URL by server side libraries, but Chrome and Firefox violate RFC and load http://host.com inst...

TL;DR How can we use technique created to protect websites for Evil? (We used XSS Auditor for Evil before) There's a neat way: taking...

Remember OAuth1 session fixation? No? Read writeup from Eran Hammer (the guy who hates OAuth2 as much as I do). Guess what - there's ...

TL;DR: In Firefox regexps with 999 998+ groups  return false, no matter was the given string valid or not. It seems like a performance opti...

I just recalled " SMS commands " feature and tried to send a DM (private, direct message) with "Share on Twitter"-button...

I wrote about this problem in May, without showcases, just a theoretical post  http://homakov.blogspot.com/2013/05/do-not-use-rjs-like-techn...

In my opinion usefulness of an XSS on a random website is next to nothing. What are you going to do with XSS on your local school website? S...

Is open redirect bad for your website? If we don't take into account "phishing", how can be open redirect dangerous?  Min...

I wrote an article today and it sucked. Here on HN  I was told a couple of times that: 1) PoC doesn't work 2) nothing is clear S...

It's ignorance of Origin. I've been ranting about cookies before , but now realized the very general flaw of cookies: they ignore ...

Quick introduction to the XSS problem XSS is not only about scripts. Overall it happens when attacker can break the expected DOM structure ...

I wrote a post about CSRF tool  and readers noticed an intentional mistake in it — storing a token in a plain cookie can be exploited with c...

on reddit / HN This post in based on  an interesting trick  by  @typicalrabbit . UPD : This has been known since 2011 , but not fixed yet...

TL;DR  Nope, I didn't find a major breach, just an interesting detail in reCAPTCHA's design. CAPTCHA ain't no good for CSRF I...