Full Disclosure mailing list archives
Todays Lesson - XSS
From: Concerned CISSP <certifiedcissp () hotmail com>
Date: Thu, 14 Jun 2007 00:35:34 -0600
Today's lesson, boys and girls is on Cross Site Scripting.... "An XSS attack relies on a website displaying text with-out checking whether it contains special characters. The client browser interprets the special characters as script instructions, and executes the script..." An example of an XSS attack: https://www.isc2.org/cgi-bin/cissp_completerecord.cgi?name"><script>alert(document.cookie);</script>&print=cpe Now that you've seen XSS... you can add one CPE to your CISSP record! Skinny Mongoose - CISSP shoutz to - $nip3r, P0p3, mkkna$ti..... _________________________________________________________________ With Windows Live Hotmail, you can personalize your inbox with your favorite color. www.windowslive-hotmail.com/learnmore/personalize.html?locale=en-us&ocid=TXT_TAGLM_HMWL_reten_addcolor_0607
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Todays Lesson - XSS Concerned CISSP (Jun 14)