... until the collector arrives ...

This "blog" is really just a scratchpad of mine. There is not much of general interest here. Most of the content is scribbled down "live" as I discover things I want to remember. I rarely go back to correct mistakes in older entries. You have been warned :)

2006-03-13

Wiki Password Lists

When storing passwords in protected HTML files, I have routinely set the text to black on black so that the passwords cannot be read by people wandering by, and also so that they are not readable when printed.  Some wikis, don't allow black on black text, so here is another cheesy alternative... create a hyperlink that pops up the the password, which is trivially encoded to stymie the passers-by:

<a href="javascript:alert(String.fromCharCode(112,97,115,115,119,111,114,100));">?</a>

Here is a snippet to URL-encode a password using a Javascript console:

var p="password"; var s = ""; for (var i = 0; i < p.length; ++i) { s += (i>0?",":"") + p.charCodeAt(i) }; s;

Blog Archive