XSS Attacks

Cross Site Scripting Exploits and Defense


  • Seth Fogie, Vice President, Airscanner, Dallas, TX, USA
  • Jeremiah Grossman, Founder and CTO, WhiteHat Security, Santa Clara, CA
  • Robert Hansen, Founder of the Hackers.org Web Application Security Lab
  • Anton Rager, Sr. Security Engineer, Avaya Labs and a founding member of Avaya's Enterprise Security Practice
  • Petko Petkov

A cross site scripting attack is a very specific type of attack on a web application. It is used by hackers to mimic real sites and fool people into providing personal data.Cross Site Scripting Attacks starts by defining the terms and laying out the ground work. It assumes that the reader is familiar with basic web programming (HTML) and JavaScript. First it discusses the concepts, methodology, and technology that makes XSS a valid concern. It then moves into the various types of XSS attacks, how they are implemented, used, and abused. After XSS is thoroughly explored, the next part provides examples of XSS malware and demonstrates real cases where XSS is a dangerous risk that exposes internet users to remote access, sensitive data theft, and monetary losses. Finally, the book closes by examining the ways developers can avoid XSS vulnerabilities in their web applications, and how users can avoid becoming a victim. The audience is web developers, security practitioners, and managers.
View full description


Web developers; penetration testers; security managers


Book information

  • Published: May 2007
  • Imprint: SYNGRESS
  • ISBN: 978-1-59749-154-9