Dheeraj Joshi djadmin

CSS Scrollbar attack

Image we have the following code:

<script>
var TOKEN="abcdef";
</script>

Two way iframe communication

The main difference between the two pages is the method of sending messages. Recieving messages is the same in both.

Parent

Send messages to iframe using iframeEl.contentWindow.postMessage Recieve messages using window.addEventListener('message')

iframe

#Introduction

Developing Chrome Extensions is REALLY fun if you are a Front End engineer. If you, however, struggle with visualizing the architecture of an application, then developing a Chrome Extension is going to bite your butt multiple times due the amount of excessive components the extension works with. Here are some pointers in how to start, what problems I encounter and how to avoid them.

Note: I'm not covering chrome package apps, which although similar, work in a different way. I also won't cover the page options api neither the new brand event pages. What I explain covers most basic chrome applications and should be enough to get you started.

agnoster.zsh-theme

A ZSH theme optimized for people who use:

Solarized
Git
Unicode-compatible fonts and terminals (I use iTerm2 + Menlo)

For Mac users, I highly recommend iTerm 2 + Solarized Dark

Locate the section for your github remote in the .git/config file. It looks like this:

[remote "origin"]
	fetch = +refs/heads/*:refs/remotes/origin/*
	url = [email protected]:joyent/node.git

Now add the line fetch = +refs/pull/*/head:refs/remotes/origin/pr/* to this section. Obviously, change the github url to match your project's URL. It ends up looking like this:

	#!/bin/bash
	#Script to Scan All Sites Found With A Simple NMAP Scan With Burp.

	sites=$(nmap "$1" --open 443 --resolve-all --open -oG - \| awk 'NR!=1 && /open/{print $2}')

	for site in $sites
	do
	curl -vgw "\\n" 'http://127.0.0.1:1337/v0.1/scan' -d '{"urls":["'"$site"'"]}' > /dev/null 2>&1
	printf "Scanning %s with burp.\\n" "$site"
	done

	#!/bin/bash
	# Script to export Safari's reading list into a text file, then import this into Pocket or Evernote (or any service with a "email in content" feature).

	# First take all of Safari's Reading List items and place them in a text file.
	/usr/bin/plutil -convert xml1 -o - ~/Library/Safari/Bookmarks.plist \| grep -E -o '<string>http[s]{0,1}://.*</string>' \| grep -v icloud \| sed -E 's/<\/{0,1}string>//g' > readinglistlinksfromsafari.txt

	# Now loop over each of those URls within that text file and add them to pocket.
	while IFS= read -r line
	do
	echo $line

	# taken from http://www.piware.de/2011/01/creating-an-https-server-in-python/
	# generate server.xml with the following command:
	# openssl req -new -x509 -keyout server.pem -out server.pem -days 365 -nodes
	# run as follows:
	# python simple-https-server.py
	# then in your browser, visit:
	# https://localhost:4443

	import BaseHTTPServer, SimpleHTTPServer
	import ssl