Unity vulnerability test

This online test attempts to download your Google account info from myaccount.google.com by exploiting the Unity Web player zero-day vulnerability.

Vulnerability details:

Read more »

Notes:

• If you aren't logged on Google, but using a vulnerable Unity Web Player, you will see HTML source of the Google page in the Unity app.
• If using a recent Chrome, the app won't start directly. You'll have to enable NPAPI plugins and access the right-mouse-button menu on the embedded element below.
• Tested on Chrome, Safari, Firefox (OS X), Internet Explorer (Windows)