Awesome Lists

cssInjection

by dxa4481

HTMLpushed over 8 years ago

Stealing CSRF tokens with CSS injection (without iFrames)

AI summary

CSS hijacking attack

A method to steal sensitive data by exploiting CSS injection vulnerabilities in websites that allow arbitrary CSS rendering.

stars
318
forks
48
watching
15
awesome list
1
View on GitHubsecurity.love/cssInjection/attacker.html

Embed the badge

Show how many awesome lists link to your project. The count updates automatically.

Awesome Lists badge
Markdown
[![Awesome Lists Badge](https://awesome.facts.dev/shield/dxa4481/cssInjection/links.svg)](https://awesome.facts.dev/awesome/dxa4481/cssInjection)
HTML
<a href="https://awesome.facts.dev/awesome/dxa4481/cssInjection"><img src="https://awesome.facts.dev/shield/dxa4481/cssInjection/links.svg" alt="Awesome Lists Badge" /></a>
Image URL
https://awesome.facts.dev/shield/dxa4481/cssInjection/links.svg

Add a GitHub project

Missing a project or an awesome list? Paste its GitHub URL and we fetch it right away.