Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Full Disclosure: Re: [WEB SECURITY] Useful technique when performing XSS

Re: [WEB SECURITY] Useful technique when performing XSS

From: Amit Klein <aksecurity_at_gmail.com>
Date: Wed, 07 Feb 2007 22:03:26 +0200

pdp (architect) wrote:
> http://www.gnucitizen.org/blog/playing-in-large
>
> Basically this article is about how to squeeze more data into size
> restricted, unsanitized field. This technique can also be used to hide
> attackers activities.
>
It seems that you've stumbled upon something I already disclosed:
http://www.webappsec.org/lists/websecurity/archive/2005-10/msg00030.html

Sorry...
-Amit

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Received on Feb 07 2007

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]