Top 10 Web Hacking Techniques of 2013
summary
Annual roundup enumerates ten concrete techniques with demos and measurements: Mutation XSS shows browsers auto‑mutating innerHTML to turn benign input into executable payloads; BREACH recovers secrets via gzip compression—live demo pulls an OWA token in 1120 requests in 43 seconds; Pixel‑perfect HTML5 timing combines requestAnimationFrame + SVG filters to read iframe content; RC4 and Lucky13 give theoretical plaintext recovery (billions or millions of samples); study finds 99.6% of Alexa Top 5,000 contain at least one DOM XSS.
AI-written summary · about
chapters (10)
- 0:00Introductions and overview
- 1:09Top 10 list process
- 3:05Techniques 10 through 6
- 6:43RC4 encryption weaknesses
- 13:46Lucky 13 attack
- 17:19Browser history sniffing
- 24:15Pixel perfect timing
- 31:16Breach attack
- 37:20Mutation XSS
- 44:40Conclusion and Q&A
