Hello guys,
In order to avoid misunderstanding, me and Luca have decided to publish
a kind of FAQs as well as the Yahoo! Mail Classic HPP details (PoC video
included!).
FAQ Posts:
http://blog.mindedsecurity.com/2009/05/http-parameter-pollution-faqs.htmlhttp://blog.nibblesec.org/2009/05/http-parameter-pollution-faqs.htmlYahoo! Video post:
http://blog.mindedsecurity.com/2009/05/client-side-http-parameter-pollution.htmlCheers,
Stefano & Luca
--
Stefano Di Paola
Chief Technology Officer, LA/ISO27001
Minded Security Research Labs Director
Minded Security - Application Security Consulting
Official Site: www.mindedsecurity.com
Personal Blog: www.wisec.it/sectou.php