Hacker GitHub

← All repos

maxchehab/CSS-Keylogging

View on GitHub ↗ ★ 3,233 CSS

Chrome extension and Express server that exploits keylogging abilities of CSS.

6 mentions on Hacker News by 6 people: 1 story, 5 comments · first 2018-02-20 · latest 2024-09-05

Mentions per year 6 mentions · busiest year 2018 (2)
20082026
AllStoriesComments NewestTopOldest
  1. …out fingerprinting, but there are other attacks that can be done. See: - CSS keylogger, 2018: https://github.com/maxchehab/CSS-Keylogging - OWASP cites CSS injection as a mechanism for XSS and data exfiltration:…
    comment by d4mi3n · 2024-09-05 · in CSS @property and the new style
  2. …the content of an input field [0], but it’s way too much of a hassle to be used in the wild. [0]: https://github.com/maxchehab/CSS-Keylogging
    comment by KMnO4 · 2020-12-12 · in Hackers hide web skimmer inside a website's CSS
  3. …types of frameworks (see https://www.mike-gualtieri.com/posts/stealing-data-with-css-... and https://github.com/maxchehab/CSS-Keylogging ). Also regarding these types of mitigations see https://www.youtube.com/watch?v=lG7U3fuNw3A which…
    comment by SahAssar · 2020-02-27 · in Don’t try to sanitize input – escape output
  4. …engine, fonts, mouse movements and inputs. [1] https://github.com/jbtronics/CrookedStyleSheets [2] https://github.com/maxchehab/CSS-Keylogging
    comment by Xeanort · 2019-12-07 · in Privacy analysis of Tiktok’s app and website
  5. …purple with javascript. I assume you can't do it through standard means. What about this css hack? https://github.com/maxchehab/CSS-Keylogging Wouldn't using a selector like a:visited { background-image: url-to-tracking-image }? You can…
    comment by byte1918 · 2018-10-19 · in Tracking Users Across the Web via TLS Session Resumption