News for hackers. Stuff that matters.

A comment on Hacking the <a> tag in 100 characters. Parent comment

Re:Hacking the <a> tag in 100 characters by batiste on Sunday March 17, 2013 @01:24PM (#5390064)
If your only goal is to send the user to a malicious page with a payload then you don't need any user action.

Just do: document.location.href = "http://malware.com;

And you are done.

[ Parent | on HN ]
Re:Hacking the <a> tag in 100 characters by bilawal on Sunday March 17, 2013 @02:02PM (#5390233)
Heck, if you're going to do that.. you don't even need JavaScript.

<meta http-equiv="refresh" content="0; url=http://malware.com />

[ Parent | on HN ]