Submit Search
Upload
HTML Binary Hacks & GIF89a Ployglot
•
Download as PPT, PDF
•
4 likes
•
4,682 views
takesako
Follow
http://conferences.yapcasia.org/ya2008/talk/1299
Read less
Read more
Technology
Entertainment & Humor
Slideshow view
Report
Share
Slideshow view
Report
Share
1 of 27
Download now
Recommended
[Ebooktienganh.com]complete ielts band 4 5
[Ebooktienganh.com]complete ielts band 4 5
kakeru todoroki
Test Your Vocabulary 1 (Penguin English)
Test Your Vocabulary 1 (Penguin English)
Melania Neata
get ready for ielts reading pre intermediate a2+ (org)
get ready for ielts reading pre intermediate a2+ (org)
nguyễn mạnh nhân
Fairyland 2 activity_book
Fairyland 2 activity_book
Iulia Nanut
Manual de programação romi
Manual de programação romi
Renan Pimentel
Manual de Operação Central Corp 16000 Intelbras - LojaTotalseg.com.br
Manual de Operação Central Corp 16000 Intelbras - LojaTotalseg.com.br
LojaTotalseg
Đề thi tuyển sinh vào lớp 10 môn Tiếng Nhật Hà Nội năm 2019 - 2020 (Đề tham k...
Đề thi tuyển sinh vào lớp 10 môn Tiếng Nhật Hà Nội năm 2019 - 2020 (Đề tham k...
Bồi dưỡng Toán lớp 6
PA09403B_MANUAL DE PROGRAMAÇÃO E OPERAÇÃO (1).pdf
PA09403B_MANUAL DE PROGRAMAÇÃO E OPERAÇÃO (1).pdf
ElizeuFerreiraDosSan
Recommended
[Ebooktienganh.com]complete ielts band 4 5
[Ebooktienganh.com]complete ielts band 4 5
kakeru todoroki
Test Your Vocabulary 1 (Penguin English)
Test Your Vocabulary 1 (Penguin English)
Melania Neata
get ready for ielts reading pre intermediate a2+ (org)
get ready for ielts reading pre intermediate a2+ (org)
nguyễn mạnh nhân
Fairyland 2 activity_book
Fairyland 2 activity_book
Iulia Nanut
Manual de programação romi
Manual de programação romi
Renan Pimentel
Manual de Operação Central Corp 16000 Intelbras - LojaTotalseg.com.br
Manual de Operação Central Corp 16000 Intelbras - LojaTotalseg.com.br
LojaTotalseg
Đề thi tuyển sinh vào lớp 10 môn Tiếng Nhật Hà Nội năm 2019 - 2020 (Đề tham k...
Đề thi tuyển sinh vào lớp 10 môn Tiếng Nhật Hà Nội năm 2019 - 2020 (Đề tham k...
Bồi dưỡng Toán lớp 6
PA09403B_MANUAL DE PROGRAMAÇÃO E OPERAÇÃO (1).pdf
PA09403B_MANUAL DE PROGRAMAÇÃO E OPERAÇÃO (1).pdf
ElizeuFerreiraDosSan
Cb papers pet 1
Cb papers pet 1
Adriana Sabau
Chất hoạt động bề mặt
Chất hoạt động bề mặt
107751101137
Test your english vocab pre interm intermediate
Test your english vocab pre interm intermediate
Ferenc Samu
Word 2019 tercera parte
Word 2019 tercera parte
Miguel Angel Gomes Saravia
Pet Cambridge
Pet Cambridge
Gabriel Caballero
03 analog control_sp17
03 analog control_sp17
John Todora
GIÁO ÁN POWERPOINT HOẠT ĐỘNG TRẢI NGHIỆM - LỚP 10 - CHÂN TRỜI SÁNG TẠO - BẢN ...
GIÁO ÁN POWERPOINT HOẠT ĐỘNG TRẢI NGHIỆM - LỚP 10 - CHÂN TRỜI SÁNG TẠO - BẢN ...
Nguyen Thanh Tu Collection
Mastercam Milling Tutorial 01
Mastercam Milling Tutorial 01
CIPETIAN EDUCATIONAL ZONE
Fce practice test (book 3)
Fce practice test (book 3)
Nguyễn Hữu Trọng Sang
documentc24 - Intel Internship Certificate.PDF
documentc24 - Intel Internship Certificate.PDF
Ganesh Kamath
Hachette 500 exercices de grammaire a1
Hachette 500 exercices de grammaire a1
madomer
Grammaire en dialogues niveau debutant (1)
Grammaire en dialogues niveau debutant (1)
GiselaGuzman10
Touchstone level 4 unit 12
Touchstone level 4 unit 12
Aninha Lage
Lets-go-phonics-book-1
Lets-go-phonics-book-1
Hong Phuong Nguyen
Topik in-30-days-intermediate-vocabulary
Topik in-30-days-intermediate-vocabulary
Tsoko Duk
Eslenglish teaching resources timesaver games
Eslenglish teaching resources timesaver games
stellaringles
HTML5 for Security Folks
HTML5 for Security Folks
Vaibhav Gupta
Application Security Vulnerabilities: OWASP Top 10 -2007
Application Security Vulnerabilities: OWASP Top 10 -2007
Vaibhav Gupta
OAuth 2.0 & Security Considerations
OAuth 2.0 & Security Considerations
Vaibhav Gupta
Application Security Risk Rating
Application Security Risk Rating
Vaibhav Gupta
Security Automation using ZAP
Security Automation using ZAP
Vaibhav Gupta
Polyglot payloads in practice by avlidienbrunn at HackPra
Polyglot payloads in practice by avlidienbrunn at HackPra
Mathias Karlsson
More Related Content
What's hot
Cb papers pet 1
Cb papers pet 1
Adriana Sabau
Chất hoạt động bề mặt
Chất hoạt động bề mặt
107751101137
Test your english vocab pre interm intermediate
Test your english vocab pre interm intermediate
Ferenc Samu
Word 2019 tercera parte
Word 2019 tercera parte
Miguel Angel Gomes Saravia
Pet Cambridge
Pet Cambridge
Gabriel Caballero
03 analog control_sp17
03 analog control_sp17
John Todora
GIÁO ÁN POWERPOINT HOẠT ĐỘNG TRẢI NGHIỆM - LỚP 10 - CHÂN TRỜI SÁNG TẠO - BẢN ...
GIÁO ÁN POWERPOINT HOẠT ĐỘNG TRẢI NGHIỆM - LỚP 10 - CHÂN TRỜI SÁNG TẠO - BẢN ...
Nguyen Thanh Tu Collection
Mastercam Milling Tutorial 01
Mastercam Milling Tutorial 01
CIPETIAN EDUCATIONAL ZONE
Fce practice test (book 3)
Fce practice test (book 3)
Nguyễn Hữu Trọng Sang
documentc24 - Intel Internship Certificate.PDF
documentc24 - Intel Internship Certificate.PDF
Ganesh Kamath
Hachette 500 exercices de grammaire a1
Hachette 500 exercices de grammaire a1
madomer
Grammaire en dialogues niveau debutant (1)
Grammaire en dialogues niveau debutant (1)
GiselaGuzman10
Touchstone level 4 unit 12
Touchstone level 4 unit 12
Aninha Lage
Lets-go-phonics-book-1
Lets-go-phonics-book-1
Hong Phuong Nguyen
Topik in-30-days-intermediate-vocabulary
Topik in-30-days-intermediate-vocabulary
Tsoko Duk
Eslenglish teaching resources timesaver games
Eslenglish teaching resources timesaver games
stellaringles
What's hot
(16)
Cb papers pet 1
Cb papers pet 1
Chất hoạt động bề mặt
Chất hoạt động bề mặt
Test your english vocab pre interm intermediate
Test your english vocab pre interm intermediate
Word 2019 tercera parte
Word 2019 tercera parte
Pet Cambridge
Pet Cambridge
03 analog control_sp17
03 analog control_sp17
GIÁO ÁN POWERPOINT HOẠT ĐỘNG TRẢI NGHIỆM - LỚP 10 - CHÂN TRỜI SÁNG TẠO - BẢN ...
GIÁO ÁN POWERPOINT HOẠT ĐỘNG TRẢI NGHIỆM - LỚP 10 - CHÂN TRỜI SÁNG TẠO - BẢN ...
Mastercam Milling Tutorial 01
Mastercam Milling Tutorial 01
Fce practice test (book 3)
Fce practice test (book 3)
documentc24 - Intel Internship Certificate.PDF
documentc24 - Intel Internship Certificate.PDF
Hachette 500 exercices de grammaire a1
Hachette 500 exercices de grammaire a1
Grammaire en dialogues niveau debutant (1)
Grammaire en dialogues niveau debutant (1)
Touchstone level 4 unit 12
Touchstone level 4 unit 12
Lets-go-phonics-book-1
Lets-go-phonics-book-1
Topik in-30-days-intermediate-vocabulary
Topik in-30-days-intermediate-vocabulary
Eslenglish teaching resources timesaver games
Eslenglish teaching resources timesaver games
Viewers also liked
HTML5 for Security Folks
HTML5 for Security Folks
Vaibhav Gupta
Application Security Vulnerabilities: OWASP Top 10 -2007
Application Security Vulnerabilities: OWASP Top 10 -2007
Vaibhav Gupta
OAuth 2.0 & Security Considerations
OAuth 2.0 & Security Considerations
Vaibhav Gupta
Application Security Risk Rating
Application Security Risk Rating
Vaibhav Gupta
Security Automation using ZAP
Security Automation using ZAP
Vaibhav Gupta
Polyglot payloads in practice by avlidienbrunn at HackPra
Polyglot payloads in practice by avlidienbrunn at HackPra
Mathias Karlsson
Viewers also liked
(6)
HTML5 for Security Folks
HTML5 for Security Folks
Application Security Vulnerabilities: OWASP Top 10 -2007
Application Security Vulnerabilities: OWASP Top 10 -2007
OAuth 2.0 & Security Considerations
OAuth 2.0 & Security Considerations
Application Security Risk Rating
Application Security Risk Rating
Security Automation using ZAP
Security Automation using ZAP
Polyglot payloads in practice by avlidienbrunn at HackPra
Polyglot payloads in practice by avlidienbrunn at HackPra
More from takesako
SECCON CTF セキュリティ競技会コンテスト開催について
SECCON CTF セキュリティ競技会コンテスト開催について
takesako
Acme minechan
Acme minechan
takesako
Acme::MineChan LT demo
Acme::MineChan LT demo
takesako
Node.js - JavaScript Thread Programming
Node.js - JavaScript Thread Programming
takesako
Node.js - sleep sort algorithm
Node.js - sleep sort algorithm
takesako
x86x64 SSE4.2 POPCNT
x86x64 SSE4.2 POPCNT
takesako
再帰的 正規表現JSON Validator
再帰的 正規表現JSON Validator
takesako
正規表現‐もう一つのバベルの塔‐木村浩一
正規表現‐もう一つのバベルの塔‐木村浩一
takesako
Perl6 Regex Programming with Rakudo
Perl6 Regex Programming with Rakudo
takesako
That Goes Without Alpha-Num (or Does It ?) all your base10 are belong to us
That Goes Without Alpha-Num (or Does It ?) all your base10 are belong to us
takesako
Devsumi2010 Ecmascript5 (ISO/IEC JTC1/SC22)
Devsumi2010 Ecmascript5 (ISO/IEC JTC1/SC22)
takesako
Perl x86 JIT Programming
Perl x86 JIT Programming
takesako
YAPC::Asia 2008 Closing Ceremony
YAPC::Asia 2008 Closing Ceremony
takesako
Devsumi2008 - YAPC::Asia 2008 Tokyo
Devsumi2008 - YAPC::Asia 2008 Tokyo
takesako
GIF89a Oldtype
GIF89a Oldtype
takesako
Shibuyajs Digest
Shibuyajs Digest
takesako
HTML2.0 - digg - OSC2007-fall
HTML2.0 - digg - OSC2007-fall
takesako
Shibuya.pm#8 - ImageFight - HTML 2.0 New Browser Detection
Shibuya.pm#8 - ImageFight - HTML 2.0 New Browser Detection
takesako
Shibuyajs24 JavaScript.GIF x LiveConnect
Shibuyajs24 JavaScript.GIF x LiveConnect
takesako
More from takesako
(19)
SECCON CTF セキュリティ競技会コンテスト開催について
SECCON CTF セキュリティ競技会コンテスト開催について
Acme minechan
Acme minechan
Acme::MineChan LT demo
Acme::MineChan LT demo
Node.js - JavaScript Thread Programming
Node.js - JavaScript Thread Programming
Node.js - sleep sort algorithm
Node.js - sleep sort algorithm
x86x64 SSE4.2 POPCNT
x86x64 SSE4.2 POPCNT
再帰的 正規表現JSON Validator
再帰的 正規表現JSON Validator
正規表現‐もう一つのバベルの塔‐木村浩一
正規表現‐もう一つのバベルの塔‐木村浩一
Perl6 Regex Programming with Rakudo
Perl6 Regex Programming with Rakudo
That Goes Without Alpha-Num (or Does It ?) all your base10 are belong to us
That Goes Without Alpha-Num (or Does It ?) all your base10 are belong to us
Devsumi2010 Ecmascript5 (ISO/IEC JTC1/SC22)
Devsumi2010 Ecmascript5 (ISO/IEC JTC1/SC22)
Perl x86 JIT Programming
Perl x86 JIT Programming
YAPC::Asia 2008 Closing Ceremony
YAPC::Asia 2008 Closing Ceremony
Devsumi2008 - YAPC::Asia 2008 Tokyo
Devsumi2008 - YAPC::Asia 2008 Tokyo
GIF89a Oldtype
GIF89a Oldtype
Shibuyajs Digest
Shibuyajs Digest
HTML2.0 - digg - OSC2007-fall
HTML2.0 - digg - OSC2007-fall
Shibuya.pm#8 - ImageFight - HTML 2.0 New Browser Detection
Shibuya.pm#8 - ImageFight - HTML 2.0 New Browser Detection
Shibuyajs24 JavaScript.GIF x LiveConnect
Shibuyajs24 JavaScript.GIF x LiveConnect
HTML Binary Hacks & GIF89a Ployglot
1.
HTML Binary Hacks
- GIF89a Polyglot - Cybozu Labs, Inc. TAKESAKO <takesako@shibuya.pm.prg>
2.
I’ll show you,
HTML 2.0 hacks.
3.
1.0 HTML Browser
Detection
4.
HTML Quiz <img
src=”1.gif” src=”2.gif”> (1) 1.gif (2) 2.gif (3) N/A Answers. Q1. What will you see? (on your browser)
5.
Q2. What’s this?
<img /src = ”1.gif” ”” src{00} = ”2.gif” ’ src{0c} = ”3.gif” src = ”4.gif” /> (1) 1.gif (2) 2.gif (3) 3.gif (4) 4.gif Answers. -> ie -> Safari -> firefox -> others
6.
7.
print<<EOF; <img /src
00 ="ie.gif" /''src 00 ="firefox1_5.gif" /''src="firefox2_0.gif" /""src="gecko_others.gif" "s 00 rc="safari2.gif" "src="safari3.gif" ""src="konqueror.gif" src 00 ="w3m.gif" src 0c ="opera.gif" src="others.gif" src="lynx.gif" /> EOF
8.
http://wafful.org Demo
9.
10.
It can detect
“Konqueror”, “Safari2” !
11.
No JavaScript &
No CSS hacks
12.
lynx
13.
w3m
14.
Mozilla/5.0 (PLAYSTATION 3;
1.00) others.gif
15.
16.
1.0 The End
17.
2.0 GIF89a Polyglot
18.
Animation GIF image
Yappoc.gif
19.
どう見ても Yappo です
本当にありがとう ございました(ry
20.
Polyglot DEMO HTML/CSS
& JS & Perl & GIF89a
21.
JavaScript in GIF
GIF89a( q /*....../);sub GIF89a{print "Hello Perl!"} __END__#*/ =1 );function GIF89a(){alert("Hello JavaScrpt!")} /*<body style=visibility:hidden> <div style=position:relative;visibility:visible> <h1>Hello HTML!</h1><!-- ................................................ ................................................ ................................................ ................................................ --><img src=?> <script src=# language=JavaScript></script></div> */ // ;
22.
HTML/CSS in GIF
GIF89a(q/*....../);sub GIF89a{print "Hello Perl!"} __END__#*/=1);function GIF89a(){alert("Hello JavaScrpt!")} /* <body style=visibility:hidden> <div style=position:relative;visibility:visible> <h1>Hello HTML!</h1> <!-- ................................................ ................................................ ................................................ ................................................ --> <img src=?> <script src=# language=JavaScript></script> </div> */// ;
23.
Perl in GIF
GIF89a(q /*....../ );sub GIF89a{print "Hello Perl!"} __END__ #*/=1);function GIF89a(){alert("Hello JavaScrpt!")} /*<body style=visibility:hidden> <div style=position:relative;visibility:visible> <h1>Hello HTML!</h1><!-- ................................................ ................................................ ................................................ ................................................ --><img src=?> <script src=# language=JavaScript></script></div> */// ;
24.
Demo
25.
26.
27.
Thank you
Download now