# Vuln in IE6&7 and Firefox reads boot.ini

**URL:** <https://forum.kirupa.com/t/vuln-in-ie6-7-and-firefox-reads-boot-ini/219224>\
**Category:** Uncategorized\
**Created:** [March 14, 2007, 9:41pm UTC](https://forum.kirupa.com/t/vuln-in-ie6-7-and-firefox-reads-boot-ini/219224 "2007-03-14T21:41:57Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![idoik](https://avatars.discourse-cdn.com/v4/letter/i/97f17d/32.png) [@idoik](https://forum.kirupa.com/u/idoik)\
**Post date:** [March 14, 2007, 9:41pm UTC](https://forum.kirupa.com/t/vuln-in-ie6-7-and-firefox-reads-boot-ini/219224/1 "2007-03-14T21:41:57Z")

</div>

[http://lcamtuf.coredump.cx/focusbug/description.txt](http://lcamtuf.coredump.cx/focusbug/description.txt)

This is a little crazy. using a bug that is in firefox and ie6&7 it records letters that you type and rearages them to load display yer boot.ini and could easy record it in anysense… proof of concept

[http://lcamtuf.coredump.cx/focusbug/ffversion.html](http://lcamtuf.coredump.cx/focusbug/ffversion.html)  
Manually type the following text:

C:\ is my boot drive. Incidentally, I like cheese.

[http://lcamtuf.coredump.cx/focusbug/ieversion.html](http://lcamtuf.coredump.cx/focusbug/ieversion.html)  
Manually type the following text:

I will never find a date. Thanks to computers and books :\

* * *

passage from concept page  
“Naturally, this is just a naive example. The same code could be used to divert keystrokes from\*\* web-based  
games, weblog entry / comment forms, on-line chats, captchas,\*\* etc. As such, this is be somewhat scary”