End of ugly XSSing

Because all the time I demonstrate some simple XSS, people ask me why it looks so ugly after the attack. Take the following example to see what I mean:

ugly xss

This could happen when you exploiting a XSS vulnerability for example through a search input box with the following javascript code
"><script>alert(123);</script>

It’s not really hard now to get around the ugly part we have behind our input box, you can just use something like the following piece of code
"><script>alert(123);</script><abc style="

This will work of course in all webbrowsers ;)

Very simple and nothing special but I think it’s worth to write a blog posting about it because of it’s a FAQ if I talk about XSS.


No Comments to “End of ugly XSSing”  

  1. No Comments

Leave a Reply