hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

clubfed
The first person who can show me code that can close the _media mediabar frame thing using scripting (before the file:javascript injection bug is fixed), gets... well I could buy you a book of your choice from amazon, or a toy from thinkgeek.com, or.. just paypal you $50 or something.

scenario:

I open it using
CODE
a=window.open("http://foo.example.com",_media);

now I want to close it with scripting. I try
CODE
a.close();
, or
CODE
_media.close();
or literally a hundred other variations and things including styles visibility:hidden, etc etc and nothing works. You provide the missing piece, get rewarded :)

Serious. Please post or PM or mail. Thanks!
clubfed
ok calling this off - that would have been useful, but too late now to be useful. looks like noone knew how to do it anyway (maybe not possible with scripting?)
relax
how about having to things using the media player, the one further down the script actually plays some kind of music or some thing

so people wouldnt think hmm this is weird
clubfed
that is smart but i don't want the bar open at all - i'm sure there must be a way. i'm still working on it. unforunately, putting it in a frameset does *not* hide it either, the mediabar consumes a chunk of the browser, even if it was called from just one frame. if people didn't have so many popup blockers, i would just load it in popup windows and push those windows off the screen somewhere... but truth is a HUGE number of people block popups because of the stupid ads, so that stops the exploit from working if you do that.

still looking...
clubfed
i settled on an imperfect solution, but at least it's invisible. sigh. (so there is no reward for infoz fyi)
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.