Web Security
[ Home ]
[ Slides ]
[ Examples ]
[ Exercises ]
[ Resources ]
Examples for XSS
Document Object Model
Very simple and unprotected page for testing XSS
examples
(
Source
). If you enter the following code inside the field, an image is displayed
<img src="/SoftSec/images/logo_bfh_new.gif">
Manipulate the DOM with javascript
Example
(
Source
).
Modify the destination of a login form in a unsuspected maner:
Example, login-form.php
(
Source
) and also the spy file
spy-login-form.php
(
source
). The username and passwords are stored on the file
loginlist.txt
;
How to hide javascript
examples
(
Source
)
Examples of lots of XSS-scripts for testing your servers
ha.ckers.org/xss.html
.
Copyright Emmanuel Benoist 2008-2013