XSS Attacks: Cross Site Scripting Exploits and Defense

✍ Scribed by Seth Fogie, Jeremiah Grossman, Robert Hansen, Anton Rager, Petko D. Petkov

• Publisher: Syngress
• Year: 2007
• Tongue: English
• Leaves: 482
• Edition: 1
• Category: Library

✦ Synopsis

A cross site scripting attack is a very specific type of attack on a web application. It is used by hackers to mimic real sites and fool people into providing personal data.

XSS Attacks starts by defining the terms and laying out the ground work. It assumes that the reader is familiar with basic web programming (HTML) and JavaScript. First it discusses the concepts, methodology, and technology that makes XSS a valid concern. It then moves into the various types of XSS attacks, how they are implemented, used, and abused. After XSS is thoroughly explored, the next part provides examples of XSS malware and demonstrates real cases where XSS is a dangerous risk that exposes internet users to remote access, sensitive data theft, and monetary losses. Finally, the book closes by examining the ways developers can avoid XSS vulnerabilities in their web applications, and how users can avoid becoming a victim. The audience is web developers, security practitioners, and managers.

✦ Table of Contents

Cover
Contents
Chapter 1: Cross-site Scripting Fundamentals Solutions in this chapter:
Chapter 2: The XSS Discovery Toolkit
Chapter 3: XSS Theory
Chapter 4: XSS Attack Methods
Chapter 5: Advanced XSS Attack Vectors
Chapter 6: XSS Exploited
Chapter 7: Exploit Frameworks
Chapter 8: XSS Worms
Chapter 9: Preventing XSS Attacks
Appendix A: The Owned List
Index