Cross site scripting

[digitalpbk]

What is it?

XSS stands for cross site scripting (CSS) Since CSS is already taken by Cascaded Style Sheets, it is named XSS X standing for a Cross. It is a kind of hacking which allows you to deface websites, loggin as another user etc.



Introduction

Let us start by looking how websites work. Starting with the simple ones, for example take this blog. It consists of a series of pages, connected by many links. This is just a simple case, now let us take a look at websites that are interactive. We are particularly interested in websites that allows us to post something and it appears on the site. The most simple example is google.com, when you search for something, it appears on their site. Or take the example of digg.com, reddit.com etc where you can submit information that is displayed on their site.


Read more >> (http://digitalpbk.blogspot.com/2006/12/introduction-to-xss-part-1.html)

[REY619]

Such type of posts are forbidden here i think....

[anilmail17]

thnx digitalpbk this trick was really cool. I played with many javascript injection before this but i never thought about this method of injecting a code. XSS is really fun. Carry on bro. If u knw more such tricks then plz share them here.