<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>hiredhacker.com &#187; firefox</title>
	<atom:link href="http://www.hiredhacker.com/tag/firefox/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.hiredhacker.com</link>
	<description>relevant ramblings of an ethical hacker</description>
	<lastBuildDate>Sat, 05 Jun 2010 17:36:30 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>More Chrome Directory Traversing.</title>
		<link>http://www.hiredhacker.com/2008/01/31/more-chrome-directory-traversing/</link>
		<comments>http://www.hiredhacker.com/2008/01/31/more-chrome-directory-traversing/#comments</comments>
		<pubDate>Thu, 31 Jan 2008 05:25:57 +0000</pubDate>
		<dc:creator>Gerry Eisenhaur</dc:creator>
				<category><![CDATA[Content]]></category>
		<category><![CDATA[0day]]></category>
		<category><![CDATA[advisory]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[firefox]]></category>
		<category><![CDATA[researching]]></category>

		<guid isPermaLink="false">http://www.hiredhacker.com/2008/01/31/more-chrome-directory-traversing/</guid>
		<description><![CDATA[Mozilla marked Bug ID 413250 as &#8216;RESOLVED FIXED&#8217; on Tuesday. I got a chance to check out the fix today, and found that the fix is inadequate in stopping the attack. Here&#8217;s another demo that reads your session store, and like before, uses the Download Statusbar extension. steal_sessionstore2.html.]]></description>
		<wfw:commentRss>http://www.hiredhacker.com/2008/01/31/more-chrome-directory-traversing/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Firefox chrome: URL Handling Directory Traversal.</title>
		<link>http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/</link>
		<comments>http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/#comments</comments>
		<pubDate>Sat, 19 Jan 2008 08:35:24 +0000</pubDate>
		<dc:creator>Gerry Eisenhaur</dc:creator>
				<category><![CDATA[Content]]></category>
		<category><![CDATA[0day]]></category>
		<category><![CDATA[advisory]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[firefox]]></category>
		<category><![CDATA[researching]]></category>

		<guid isPermaLink="false">http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/</guid>
		<description><![CDATA[I spent some time tonight with scripting access to chrome files and found that Firefox doesn&#8217;t properly handle escaped characters. Its possible to load any javascript file on a victims machine. This attack is similar to previously disclosed vulnerabilities but is not constrained to basic Firefox files. To exploit this the victim needs to have [...]]]></description>
		<wfw:commentRss>http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/feed/</wfw:commentRss>
		<slash:comments>46</slash:comments>
		</item>
	</channel>
</rss>
