You are here |
www.matuzo.at | ||
| | | |
neilmadden.blog
|
|
| | | | A message I'm very used to seeing - but does XSS have to mean game over for web security? There's a persistent belief among web security people that cross-site scripting (XSS) is a "game over" event for defence: there is no effective way to recover if an attacker can inject code into your site. Brian... | |
| | | |
davidlynch.org
|
|
| | | | Pretending innocence, I ask why all these high profile websites have their homepages covered in spinning images? CNN (screenshot) The New York Times (screenshot) Mashable (screenshot) Fox News (screenshot) Okay, obviously enough, I'm messing with them. But how can I do that? The answer is cross site scripting ("XSS"). XSS... | |
| | | |
blog.kotowicz.net
|
|
| | | | A blog on security, malware, cryptography, pentesting, javascript, php and whatnots | |
| | | |
introvertmac.wordpress.com
|
|
| | What is CSRF ? "Cross-site request forgery, also known as one-click attack or session riding and abbreviated as CSRF (sometimes pronounced sea-surf) or XSRF, is a type of malicious exploit of a website where unauthorized commands are transmitted from a user that the website trusts." - Wikipedia CSRF is at 8th position in OWASP... |