Xploiting Google Gadgets: Gmalware and Beyond
Category: Education (depraced!)
- views: 3 584
- date: 1 February 2010
- posted by: sijibae

If today’s malware mostly runs on Windows because it’s the commonest executable platform, tomorrow’s will likely run on the Web, for the very same reason. Because, like it or not, Web is already a huge executable platform, and we should start thinking at it this way, from a security perspective.
XSS So what?
Execute arbitrary code
“Use javascript and HTML to craft custom payloads”
Content Spoofing
“Make users believe that content is legitimate when in fact it is controlled by an attacker with malicious intent.”
Phishing
“Steal user passwords by faking login portals to webbased services, devices, or web sites.”
Cross-Gadget Attacks
Gadgets can attack one another, steal cookies and/or data, manipulate the content of other gadgets.
We need your support!
Make a donation to help us stay online
Bitcoin (BTC)
bc1q08g9d22cxkawsjlf8etuek2pc9n2a3hs4cdrld
Bitcoin Cash (BCH)
qqvwexzhvgauxq2apgc4j0ewvcak6hh6lsnzmvtkem
Ethereum (ETH)
0xb55513D2c91A6e3c497621644ec99e206CDaf239
Litecoin (LTC)
ltc1qt6g2trfv9tjs4qj68sqc4uf0ukvc9jpnsyt59u
USDT (ERC20)
0xb55513D2c91A6e3c497621644ec99e206CDaf239
USDT (TRC20)
TYdPNrz7v1P9riWBWZ317oBgJueheGjATm
Information |
|||
![]() |
Users of GUESTS are not allowed to comment this publication. | ||









