SlideShare a Scribd company logo
1 of 25
Download to read offline
iALERT White Paper




            The Evolution of
       Cross-Site Scripting Attacks
                                               By David Endler
                                                  iDEFENSE Labs
                                               dendler@idefense.com


                                                  May 20, 2002

                                                      iDEFENSE Inc.
                                                 14151 Newbrook Drive
                                                        Suite 100
                                                   Chantilly, VA 20151
                                                   Main: 703-961-1070
                                                   Fax: 703-961-1071
                                                http://www.idefense.com



                                              Copyright © 2002, iDEFENSE Inc.
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss
Evolution Xss

More Related Content

Viewers also liked

I Http Module Leveraging
I Http Module LeveragingI Http Module Leveraging
I Http Module Leveraging
guestc27cd9
 
Present For Puple
Present For PuplePresent For Puple
Present For Puple
celeste82
 
Exploiting And Defending Web Applications
Exploiting And Defending Web ApplicationsExploiting And Defending Web Applications
Exploiting And Defending Web Applications
guestc27cd9
 
Keysfacultydevelopment6
Keysfacultydevelopment6Keysfacultydevelopment6
Keysfacultydevelopment6
Pelham Mead
 
Custom Theme Japanese
Custom Theme JapaneseCustom Theme Japanese
Custom Theme Japanese
guestd3190d
 
Tulip Tree Nature Theme
Tulip Tree Nature ThemeTulip Tree Nature Theme
Tulip Tree Nature Theme
Pelham Mead
 

Viewers also liked (20)

\"Fado\"
\"Fado\"\"Fado\"
\"Fado\"
 
I Http Module Leveraging
I Http Module LeveragingI Http Module Leveraging
I Http Module Leveraging
 
Lol
LolLol
Lol
 
Hoy A Las 7 Y 40 Pm
Hoy A Las 7  Y 40 PmHoy A Las 7  Y 40 Pm
Hoy A Las 7 Y 40 Pm
 
Present For Puple
Present For PuplePresent For Puple
Present For Puple
 
Random Outburst Of Love.
Random Outburst Of Love.Random Outburst Of Love.
Random Outburst Of Love.
 
Exploiting And Defending Web Applications
Exploiting And Defending Web ApplicationsExploiting And Defending Web Applications
Exploiting And Defending Web Applications
 
Haz Algo Por Alguien
Haz Algo Por AlguienHaz Algo Por Alguien
Haz Algo Por Alguien
 
Importantisimo
ImportantisimoImportantisimo
Importantisimo
 
Dsl Pattern Language
Dsl Pattern LanguageDsl Pattern Language
Dsl Pattern Language
 
AlmeríA
AlmeríAAlmeríA
AlmeríA
 
Презентация Суходоева
Презентация СуходоеваПрезентация Суходоева
Презентация Суходоева
 
NECC Librarians and Web 2.0
NECC Librarians and Web 2.0NECC Librarians and Web 2.0
NECC Librarians and Web 2.0
 
PresentacióN Ej07 087
PresentacióN Ej07 087PresentacióN Ej07 087
PresentacióN Ej07 087
 
Problemas
ProblemasProblemas
Problemas
 
Keysfacultydevelopment6
Keysfacultydevelopment6Keysfacultydevelopment6
Keysfacultydevelopment6
 
Custom Theme Japanese
Custom Theme JapaneseCustom Theme Japanese
Custom Theme Japanese
 
PresentacióN Ej07 085
PresentacióN Ej07 085PresentacióN Ej07 085
PresentacióN Ej07 085
 
Tulip Tree Nature Theme
Tulip Tree Nature ThemeTulip Tree Nature Theme
Tulip Tree Nature Theme
 
Gameplans, onderhandelen en beinvloeden
Gameplans, onderhandelen en beinvloedenGameplans, onderhandelen en beinvloeden
Gameplans, onderhandelen en beinvloeden
 

More from guestc27cd9

Improving Web App Sec Microsoft
Improving Web App Sec MicrosoftImproving Web App Sec Microsoft
Improving Web App Sec Microsoft
guestc27cd9
 
Iis Security Programming Countermeasures
Iis Security Programming CountermeasuresIis Security Programming Countermeasures
Iis Security Programming Countermeasures
guestc27cd9
 
Financial Website Security
Financial Website SecurityFinancial Website Security
Financial Website Security
guestc27cd9
 
Future Inet Worms
Future Inet WormsFuture Inet Worms
Future Inet Worms
guestc27cd9
 
Guide2 Web App Sec
Guide2 Web App SecGuide2 Web App Sec
Guide2 Web App Sec
guestc27cd9
 
Http Request Smuggling
Http Request SmugglingHttp Request Smuggling
Http Request Smuggling
guestc27cd9
 
Http Response Splitting
Http Response SplittingHttp Response Splitting
Http Response Splitting
guestc27cd9
 

More from guestc27cd9 (9)

Improving Web App Sec Microsoft
Improving Web App Sec MicrosoftImproving Web App Sec Microsoft
Improving Web App Sec Microsoft
 
Iis Security Programming Countermeasures
Iis Security Programming CountermeasuresIis Security Programming Countermeasures
Iis Security Programming Countermeasures
 
Financial Website Security
Financial Website SecurityFinancial Website Security
Financial Website Security
 
Form Tampering
Form TamperingForm Tampering
Form Tampering
 
Future Inet Worms
Future Inet WormsFuture Inet Worms
Future Inet Worms
 
Guide2 Web App Sec
Guide2 Web App SecGuide2 Web App Sec
Guide2 Web App Sec
 
Hacking Tomcat
Hacking TomcatHacking Tomcat
Hacking Tomcat
 
Http Request Smuggling
Http Request SmugglingHttp Request Smuggling
Http Request Smuggling
 
Http Response Splitting
Http Response SplittingHttp Response Splitting
Http Response Splitting
 

Recently uploaded

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
?#DUbAI#??##{{(☎️+971_581248768%)**%*]'#abortion pills for sale in dubai@
 

Recently uploaded (20)

Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024
 
Manulife - Insurer Transformation Award 2024
Manulife - Insurer Transformation Award 2024Manulife - Insurer Transformation Award 2024
Manulife - Insurer Transformation Award 2024
 
A Beginners Guide to Building a RAG App Using Open Source Milvus
A Beginners Guide to Building a RAG App Using Open Source MilvusA Beginners Guide to Building a RAG App Using Open Source Milvus
A Beginners Guide to Building a RAG App Using Open Source Milvus
 
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
 
Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)
 
FWD Group - Insurer Innovation Award 2024
FWD Group - Insurer Innovation Award 2024FWD Group - Insurer Innovation Award 2024
FWD Group - Insurer Innovation Award 2024
 
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data DiscoveryTrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
 
Navi Mumbai Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Navi Mumbai Call Girls 🥰 8617370543 Service Offer VIP Hot ModelNavi Mumbai Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Navi Mumbai Call Girls 🥰 8617370543 Service Offer VIP Hot Model
 
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, AdobeApidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
 
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
 
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost SavingRepurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processors
 
"I see eyes in my soup": How Delivery Hero implemented the safety system for ...
"I see eyes in my soup": How Delivery Hero implemented the safety system for ..."I see eyes in my soup": How Delivery Hero implemented the safety system for ...
"I see eyes in my soup": How Delivery Hero implemented the safety system for ...
 
ICT role in 21st century education and its challenges
ICT role in 21st century education and its challengesICT role in 21st century education and its challenges
ICT role in 21st century education and its challenges
 
EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER
EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWEREMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER
EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER
 
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
 
Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...
Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...
Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...
 
Corporate and higher education May webinar.pptx
Corporate and higher education May webinar.pptxCorporate and higher education May webinar.pptx
Corporate and higher education May webinar.pptx
 

Evolution Xss

  • 1. iALERT White Paper The Evolution of Cross-Site Scripting Attacks By David Endler iDEFENSE Labs dendler@idefense.com May 20, 2002 iDEFENSE Inc. 14151 Newbrook Drive Suite 100 Chantilly, VA 20151 Main: 703-961-1070 Fax: 703-961-1071 http://www.idefense.com Copyright © 2002, iDEFENSE Inc.