Because all the time I demonstrate some simple XSS, people ask me why it looks so ugly after the attack. Take the following example to see what I mean:

This could happen when you exploiting a XSS vulnerability for example through a search input box with the following javascript code
"><script>alert(123);</script>
It’s not really hard now to get around the ugly part we have behind our input box, you can just use something like the following piece of code
"><script>alert(123);</script><abc style="
This will work of course in all webbrowsers
Very simple and nothing special but I think it’s worth to write a blog posting about it because of it’s a FAQ if I talk about XSS.
No Comments to “End of ugly XSSing”
Please Wait
Leave a Reply