How does this work?
jamiehankins.co.uk. 33 IN TXT ""
jamiehankins.co.uk. 33 IN TXT ""TXT Record XSS
11–20 of 236 posts
Re: TXT Record XSS
#12How does this work?
[deleted]
Re: TXT Record XSS
#13How does this work?
Use dig:
$ dig txt jamiehankins.co.uk
Re: TXT Record XSS
#14Wasn't expecting that at all! Had several tabs opened and was really confused for a few seconds while I tried to find the tab with 'youtube on autoplay'. Firefox needs to show the 'play' icon for the audio tag.
Stuff like this is why NoScript and RequestPolicy were invented.
Re: TXT Record XSS
#15Can it be done with CNAME and SRV records too?
Re: TXT Record XSS
#16isn't this technically illegal to demonstrate haha?
Re: TXT Record XSS
#17From any Linux (or probably OS X) workstation / server, you can run the command "host -t TXT jaimehankins.co.uk" ie:
$ host -t TXT jamiehankins.co.uk
;; Truncated, retrying in TCP mode.
jamiehankins.co.uk descriptive text ""
jamiehankins.co.uk descriptive text "v=spf1 include:spf.mandrillapp.com ?all"
jamiehankins.co.uk descriptive text ""
jamiehankins.co.uk descriptive text "google-site-verification=nZUP4BagJAjQZO6AImXyzJZBXBf9s1FbDZr8pzNLTCI"
Re: TXT Record XSS
#18This is hilariousy, but could this potentially be a real threat to anything ?
Re: TXT Record XSS
#19Wasn't expecting that at all! Had several tabs opened and was really confused for a few seconds while I tried to find the tab with 'youtube on autoplay'. Firefox needs to show the 'play' icon for the audio tag.
For what it's worth, Chrome tells you which tab audio is playing from, it's nice.
Re: TXT Record XSS
#20Wonderful!