There is no Data, there is only XUL: Using XUL to spoof a web browser and next generation UIML phishing attacks
The following outlines how to utilize XUL applications to 'spoof' an entire firefox/mozilla window. This allows one to phish people across all domains simply by visiting any webpage where popups and JavaScript is allowed to execute. This is merely a demonstration on how to fool people with UIML's. I started poking...
