Exploit XSS: Bypass HTMLEncode()

Feb 10, 14 Exploit XSS: Bypass HTMLEncode()

Posted by in Application Security, XSS

In a previous post, I described how to detect and exploit a basic cross site scripting (XSS) vulnerability. The vulnerability that was demonstrated was not being protected by any mechanism. This article will demonstrate exploiting the same vulnerability being protected by HTMLEncode() as oppose to HTMLAttributeEncode() as described...

read more

Find and Exploit Cross Site Scripting (XSS) Flaws

Feb 10, 14 Find and Exploit Cross Site Scripting (XSS) Flaws

Posted by in Application Security, Research, XSS

How to Find and Exploit Cross Site Scripting (XSS) Vulnerabilities In a previous post, How to Prevent Cross Site Scripting, I explain how to prevent Cross Site Scripting (XSS) issues. This article will demonstrate a simple approach how to identify and exploit cross site scripting vulnerabilities. Meet our target.. I am using an old...

read more