Fwd: Cross Site Tracing examples?

[Peter Wood <peterw () firstbase co uk>]

>To: pen-test () securityfocus com
>Subject: Cross Site Tracing examples?
>From: "Todd A. Jacobs" <nospam () codegnome org>
>X-Delivery-Agent: TMDA/0.77 (Count Turf)
>
>I'm looking for some detailed examples of XST. Google didn't turn up much
>except tons of press releases that the vulnerability exists, but I
>couldn't find any examples or exploit code to go along with it. In fact, I
>couldn't even find XST in the CVE database.
>
>Can anyone point me in the right direction here?
>
Try http://sandsprite.com/Sleuth/papers/XSS-Paper.txt

cheers
Pete


---------------------------------------------------------------------------
Latest attack techniques.

You're a pen tester, but is google.com still your R&D team? Now you can get 
trustworthy commercial-grade exploits and the latest techniques from a 
world-class research group.

Visit us at: www.coresecurity.com/promos/sf_ept1 
or call 617-399-6980
----------------------------------------------------------------------------