Cross Site Scripting Vulnerabilities - XSS

From: Jason binger (cisspstudy@yahoo.com)
Date: 08/04/02 

Date: Sat, 3 Aug 2002 22:52:45 -0700 (PDT)
From: Jason binger <cisspstudy@yahoo.com>
To: pen-test@securityfocus.com

Has anyone on the list done much with testing for XSS
vulnerabilities?

Has anyone written a simple work program to test for
these vulnerabilities that they are happy to
distribute so others can do basic testing for these
vulnerabilities?

There a few papers out on this topic, but none that I
hve seen that really focus on the testing side of
things.

Thanks

__________________________________________________
Do You Yahoo!?
Yahoo! Health - Feel better, live better
http://health.yahoo.com

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/

Relevant Pages

  • Re: Cross Site Scripting Vulnerabilities - XSS
    ... Cross Site Scripting Vulnerabilities - XSS ... >>> This list is provided by the SecurityFocus Security Intelligence ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re:One Big Review, One Small Script?
    ... >This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... >automatically alerts you to the latest security vulnerabilities please see: ...
    (Pen-Test)
  • Re: Scanners and unpublished vulnerabilities - Full Disclosure
    ... AH> vulnerabilities they have notified vendors about. ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • MDAC/ IIS / Shell Code Goodies
    ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... automatically alerts you to the latest security vulnerabilities please see: ...
    (Pen-Test)
  • RE: Vulnebrability level definition
    ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... automatically alerts you to the latest security vulnerabilities please see: ...
    (Pen-Test)