<html>
<head>
<style>
P
{
margin:0px;
padding:0px
}
body
{
FONT-SIZE: 10pt;
FONT-FAMILY:Tahoma
}
</style>
</head>
<body>
Today's lesson, boys and girls is on Cross Site Scripting....<BR>
<BR>
"An XSS attack relies on a website displaying text with-out checking whether it contains special characters. The client browser interprets the special characters as script instructions, and executes the script..."<BR>
<BR>
An example of an XSS attack:<BR>
<A href='https://www.isc2.org/cgi-bin/cissp_completerecord.cgi?name"><script>alert(document.cookie);</script>&print=cpe'>https://www.isc2.org/cgi-bin/cissp_completerecord.cgi?name"><script>alert(document.cookie);</script>&print=cpe</A><BR>
<BR>
Now that you've seen XSS... you can add one CPE to your CISSP record!<BR>
<BR>
<BR>
Skinny Mongoose - CISSP<BR>
<BR>
shoutz to - $nip3r, P0p3, mkkna$ti.....<BR><br /><hr />Change is good. See what's different about Windows Live Hotmail. <a href='www.windowslive-hotmail.com/learnmore/default.html?locale=en-us&ocid=RMT_TAGLM_HMWL_reten_changegood_0607' target='_new'>Check it out!</a></body>
</html>