Resident Scripts

← Browser Workshop  ·  35 posts

DateExperiment
Feb 2017 The Attack of the Alerts and the Zombie Script (IE)
Apr 2014 Resident Script Execution via Cached iFrame window.open
Apr 2014 Resident Script Execution via HTML Object Element and createPopup
Nov 2013 Persistent Keylogger via Resident createPopup
Nov 2013 Resident Script via htmlFile ActiveXObject in New Tab
Nov 2013 Resident Script via Web Worker Spawned in onpagehide
Sep 2013 Resident Script via HTML Object External Reference
Aug 2013 Resident Script Execution via onpagehide
Aug 2013 Resident Plugin Execution via Background Navigation Caching
Aug 2013 Resident Script Execution via onbeforeunload/onunload
Mar 2013 Resident Script via createElement Object Self-Pointer
Feb 2013 IE10 Resident Script via Cached iFrame window.open
Sep 2012 IE10 Resident Script via ActiveX htmlFile
Apr 2011 Resident Cached createPopup Document Survives Redirect
Feb 2011 IE9: Resident createPopup Persists After the Browser Is Closed
Oct 2010 IE9: Staying Resident and Capturing Keystrokes via Zombie IFrame and createPopup
Dec 2009 Staying Resident via a Destroyed HTML Object
Nov 2009 Staying Resident via a Cached Flash IFrame Document
Aug 2009 Resident Script via XAML Frame — Destroy the Object Tag
May 2009 Resident Script via Cached IFrame open Method
Apr 2009 IE Resident Script via createElement OBJECT Self-Reference
Mar 2009 Resident Script via Self-Pointing htmlFile
Mar 2009 Resident Script via WebSlice XAML Frame
Nov 2008 IE8 Resident Script via Cached execScript (WinOOB 1004580)
Jul 2008 IE8 Resident Script via Cached execScript and htmlFile
May 2008 Safari Resident Script: onunload Navigation Interception and Banner Hijacking
Apr 2008 BlueHat Demos: Resident Scripts, Banner Hijacking, UXSS, and Ghost
Apr 2008 Kevin's XML Resident Script POC
Apr 2008 IE7 Resident - opener, createElement, OBJECT
Jul 2007 Resident Script via Cached execScript from an Iframe
May 2007 Resident Script via Cached window.open from an Iframe
Dec 2006 Resident with Just htmlFile
Nov 2006 Resident - Thank You for Being There, Mr. IFRAME
Nov 2006 Resident Again
Feb 2006 Lazarus Resurrection — Resident Script via IFRAME + window.opener (MSRC 6427)