Quoting from ha.ckers and Jeremiah Grossman here is the list of the Top 10 Web Hacks of 2006
Top 10
- Web Browser Intranet Hacking / Port Scanning - (with JavaScript and with HTML-only and the improved model)
- Internet Explorer 7 “mhtml:” Redirection Information Disclosure
- Anti-DNS Pinning and Circumventing Anti-Anti DNS pinning
- Web Browser History Stealing – (with CSS, evil marketing, JS login-detection, and authenticated images)
- Backdooring Media Files (QuickTime, Flash, PDF, Images, Word [2], and MP3‘s)
- Forging HTTP request headers with Flash
- Exponential XSS
- Encoding Filter Bypass (UTF-7, Variable Width, US-ASCII)
- Web Worms – (AdultSpace, MySpace, Xanga)
- Hacking RSS Feeds
