Apple Safari 4.0.4 & Google Chrome 4.0.249 CSS Stack Overflow PoC

Are you using Safari or Google Chrome ? Try following link to test your browser.

http://www.krishnendu.com/safari.html

Tested on WinXP SP3 and Windows 7 64bit Also works on Apple iPhone Safari

Stack Overflow caused by long malformed string inside of <style type=”txt/css”> </style>
Code will cause Apple Safari to crash throwing a stack overflow.

Courtesy : Rad L. Sneak

Google Buzz Sucks – Working POC

Google Buzz

Guys,

I am a guy who is always in love with Google , and really respect them for their business policies and new ideas. But, for the case of google wave and Google Buzz, I somewhat disliked it – because there are other player, and google becoming more aggressive to poke their nose on every single market.

After google buzz published , I came to know from my colleague – Aloke Majumder – and tried to use it. But found, it is something which I really don’t like in my Inbox,  one of my gurus and a real close friend Indranil Dasgupta shared same view like me.

And, you know, – after searching over the net and checking google buzz – what I found ? Google Buzz is vulnerable to Cross-Site Request Forgery (CSRF/XSRF) attacks. I uploaded a PoC

Please login to your gmail account, and then click on following URL.

http://www.krishnendu.com/google/index.html

After checking the URL , goto your gmail account and click on Buzz link. You will find that you are logged out from google account !!!!! Voila….

Surely google will fix this issue asap.

SU request Blank after rooting

Many of you may have seen when trying to run application like terminal in root mode or some other application on a new G1 ROM – which need root privilege, when 1st time running application of G1, you are getting blank screen on su request. Few people are using fix like formatting the micro SD card, which fix it temporary. The easiest fix for that, go to settings -> applications -> development, and then enable USB debugging. After that, you will not get any blank screen when running the appz in root mode. Voila .. Happy hacking.

Using G1 as Edge/3G gateway Internet Server for PC

Last day my Internet connection was down. But needed to check some mail. So, was trying to make my G1 as internet proxy, as my G1 is always connected using BSNL unlimited GPRS , and speed is just ok to check emails. Following is the solution by which you can make it working.

- Install Proxoid from Market
- Install ADP on computer
- Activate Settings->Applications->Development->USB-Debugging
- Start Proxoid on Phone (you might need to tick the Start/Stop Proxoid Box)
- Enter in a Dosbox (or a Link) “adb forward tcp:8080 tcp:8080″
- Change your browser proxy-settings to point to Server:localost port:8080

And Happy Surfing, if you have 3G in your area – you can forgot abt your broadband :-)

More Later…..