WebApp Sec mailing list archives

Re: XSS


From: "Kevin Spett" <kspett () spidynamics com>
Date: Tue, 10 Dec 2002 10:26:06 -0500

We've got an XSS paper that describes a real attack in technical detail.
The scenario it uses is a bank login page that uses client-supplied data for
a login-failed error message.

http://www.spidynamics.com/mktg/xss


I hope it helps.



Kevin Spett
SPI Labs
http://www.spidynamics.com/

----- Original Message -----
From: "John Madden" <chiwawa999 () yahoo com>
To: <webappsec () securityfocus com>
Sent: Tuesday, December 10, 2002 9:38 AM
Subject: XSS


Hello all,

Being new to XSS and seing alot of messages in the
last couple weeks on the subject got me wondering...

What is the real vulnerability if the site in
questions is vulnerable to XSS but does not let you
write any malicious scripts on the system, like
message board, forums etc... ? Can anything be done to
exploit XSS if the above scenario occurs ? I know it
depends on the web server, packages installed etc...
I'm asking in generaly is it possible ?

You can do the document.cookie and view your
cookie, that migth give a hint on the structure but...
or redirect yourself to another web site :) etc...

I've read the document on XSS by David Endler
http://www.idefense.com/papers.html but still have
some questions.

If possible, can the XSS guru's on the list shed some
light on the subject.

Thanks for your time,

Cheers


__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com



Current thread: