PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

uBlock, I exfiltrate: exploiting ad blockers with CSS

portswigger.net | research | #web-security | #css-injection | #ublock-origin | #ad-blockers | #filter-lists | #password-theft
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

CSS injection flaws in uBlock Origin's filter rules let crafted filters extract page data and steal Edge passwords; all issues were patched, with compromised filter lists the plausible vector.
Published
Collected

Related coverage

research · portswigger.net
Inline Style Exfiltration: leaking data with chained CSS conditionals
Chained CSS if() conditionals in inline styles exfiltrate attribute data such as usernames via background requests — no selectors or stylesheet imports needed; Burp actions brute-force values.
research · portswigger.net
Blind CSS Exfiltration: exfiltrate unknown web pages
Blind CSS exfiltration extracts unknown page content when JavaScript is blocked by CSP or DOMPurify, chaining the :has selector and CSS variables into conditional requests that leak data.
research · portswigger.net
Detecting and exploiting path-relative stylesheet import (PRSSI) vulnerabilities
James Kettle walks through path-relative stylesheet import (PRSSI) vulnerabilities, the Relative Path Overwrite technique that tricks browsers into loading HTML as CSS, using a real phpBB3 example.
research · vercel.com
DeepsecBench: evaluating model performance in finding cybersecurity vulnerabilities
Today we're releasing DeepsecBench, a benchmark that evaluates how well different models find security vulnerabilities in application code.
research · vercel.com
Security boundaries in agentic architectures
A framework for drawing security boundaries in agentic architectures. Most agents run with zero isolation between the agent and the code it generates. Learn where to draw the boundaries, from secret injection to full application sandboxing.
blog · yeswehack.com
James Kettle’s ‘autonomous research cascade’, CRLF-powered desync attacks, RCE on humanoid robots – ethical hacker news roundup
This roundup covers James Kettle's autonomous research cascade, CRLF-powered desync attacks, a CSS bomb in webmail, and unauthenticated root RCE on Unitree G1 robots.
Back