OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
[Full-disclosure] Todays Lesson - XSS

From: Concerned CISSP (certifiedcissphotmail.com)
Date: Thu Jun 14 2007 - 01:35:34 CDT


Today's lesson, boys and girls is on Cross Site Scripting....
 
"An XSS attack relies on a website displaying text with-out checking whether it contains special characters. The client browser interprets the special characters as script instructions, and executes the script..."
 
An example of an XSS attack:
https://www.isc2.org/cgi-bin/cissp_completerecord.cgi?name"><script>alert(document.cookie);</script>&print=cpe
 
Now that you've seen XSS... you can add one CPE to your CISSP record!
 
 
Skinny Mongoose - CISSP
 
shoutz to - $nip3r, P0p3, mkkna$ti.....
_________________________________________________________________
With Windows Live Hotmail, you can personalize your inbox with your favorite color.
www.windowslive-hotmail.com/learnmore/personalize.html?locale=en-us&ocid=TXT_TAGLM_HMWL_reten_addcolor_0607

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/