Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

RE: Mouseover URL spoof with IE
From: "Thor Larholm" <thor () pivx com>
Date: Wed, 9 Feb 2005 12:24:29 -0800

I'm guessing you are refering to the status bar which displays the
address of a link onmouseover.

The addressbar can by design be programmatically changed to display
anything you want at any time, including when you hover over a link and
the onmouseover event fires. Simply change the window.status property
from JS.


Thor

-----Original Message-----
From: full-disclosure-bounces () lists netsys com
[mailto:full-disclosure-bounces () lists netsys com] On Behalf Of Danny
Sent: Wednesday, February 09, 2005 8:32 PM
To: Full-Disclosure (E-mail)
Subject: [Full-disclosure] Mouseover URL spoof with IE

Can the URL displayed on a mouseover in IE, be spoofed?

Thank you,

...D
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]