The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

Chapter 5 

■

Bypassing Client-Side Controls

119

70779c05.qxd:WileyRed  9/16/07  5:14 PM  Page 119

---

have installed the Adobe Acrobat plug-in for Internet Explorer, the following

code will display a dialog showing the version of Acrobat installed:

onclick=JavaScript:alert(document.TheAxControl.AcrobatVersion)>

In addition to looking for  code like this, you can easily identify instances

where an application attempts to install a new ActiveX control, because your

browser will present an alert asking for your permission to install it.

N OT E