Framing Attacks on Smartphones Dumb Routers and Social Sites Tap-jacking Geo-localization and Framing Leak Attacks

Gustav Rydstedt; Baptiste Gourdin; Elie Bursztein; Dan Boneh

clickjacking

Framing Attacks on Smartphones Dumb Routers and Social Sites Tap-jacking Geo-localization and Framing Leak Attacks

By Gustav Rydstedt, Baptiste Gourdin, Elie Bursztein, Dan Boneh @WOOT 2010

0 reaction(s) | 692 downloads

We show that phone features makes Tap-jacking easier. We explain how to exploit router web interface to steal WiFi network WPA key and location. Finally we demonstrate how to exploit the frame scrolling attack to attack Facebook frame busting defense and leak private information from Yahoo mobile webmail.

You liked it, share it !

Downloads

paper

slides

@INPROCEEDINGS {
title	= {Framing Attacks on Smartphones Dumb Routers and Social Sites Tap-jacking Geo-localization and Framing Leak Attacks}
author	= {Gustav Rydstedt and Baptiste Gourdin and Elie Bursztein and Dan Boneh}
booktitle	= {Workshop On Offensive Technologies(WOOT)}
year	= {2010}
month	= {August}
url	= {\url{http://elie.im/publication/framing-attacks-on-smartphones-dumb-routers-and-social-sites-tap-jacking-geo-localization-and-framing-leak-attacks}}
}