[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-disclosure] GMail Contact Information Disclosure PoC
- To: websecurity@xxxxxxxxxxxxx, RSnake <h@xxxxxxxxx>, full-disclosure@xxxxxxxxxxxxxxxxx
- Subject: [Full-disclosure] GMail Contact Information Disclosure PoC
- From: beNi <backebackekuchen@xxxxxxxxx>
- Date: Wed, 14 Mar 2007 19:57:18 +0100
This is my GMail Contact information Disclosure Proof Of Concept
Exploit, allowing you to read the Email addresses of all contacts of the
currently logged in Google user.
http://mybeni.rootzilla.de/mybeNi/2007/gmail_information_disclosure/
(It also Allows you to check if someone is currently logged into Google
Services + Serves you the Authentication Token)
have fun and cheers, benjamin
--
benjamin "beNi" flesch
mybeNi.tk websecurity - http://mybeNi.rootzilla.de/mybeNi/
(coolest guy in da hood)
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/