[blog.rayfoo]

First time this hack is used in an “actual” (aka production) site. Probably one of the more creative “hacks” I’ve seen around: using CSS history to enumerate whether you’ve been visiting a particular site or not.

For more info you can find the post here, or go Google it yourself for related posts. There is a proof of concept too for those who want to see even more.

Related posts that you might be interested in...

• November 6, 2009 -- Up and Coming: Detecting Malice (0)
• October 12, 2009 -- Testing Slowloris against nginx (0)
• August 15, 2010 -- Splunking User Agent strings (0)
• July 18, 2010 -- Interesting scanner (0)
• July 14, 2010 -- More automation needed (0)
• May 21, 2010 -- Metasploitable! (0)
• May 2, 2010 -- So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users (0)
• April 29, 2010 -- Weird outgoing IP accesses… (0)
• March 13, 2010 -- Fun with Splunk: SSHD (0)
• March 11, 2010 -- IE zero-day flaw leaks out; Exploit code published (0)