Web Security Planning
Your Guide to Web Security Planning
Mar
30

With all the efforts in preventing cyber attacks, many people fear that the US government may be snooping into the online activities of any individual. However, the White House and some industry sources have denied the allegations. According to Bush administration, they are already finalizing some guidelines that are intended to increase protection against cyber [...]

Mar
25

The attempt to increase awareness about how trouble-free it is for a professional hacker to exploit a vulnerable web application does not seem to be going too far. The “We’ll see when I get hacked” mentality was very common to hackers and still lingering among site owners who ultimately jeopardize losing big chunks of money [...]

Study of different cases which detail XSS intrusions explains us how the changing web technology is nowhere close to making web applications more secure. A detailed web search will make known many stories of large-scale corporation web sites being hacked using XSS exploits, and the reports of such cases always show the same recurring costs [...]

Without much going into complexity of technical details, one must be attentive of the various cases which have shown that XSS can have serious consequences when inserted on a vulnerable web application. Lot site owners think no more of XSS on the web pages that it cannot be used to steal sensitive data from a [...]

Mar
5
Hacking
Larry in General

A very good example of XSS is when a malicious user executes a script in a valid shopping site URL then a user will be forwarded to a bogus but identical page. The malicious page would run a script and will capture the cookie of the user browsing the shopping site, and that cookie returns [...]

Cross Site Scripting or called XSS is one of the most common application-layer web intrusions. XSS mostly targets scripts embedded in a site which are executed on the client-side, which is in the user’s side, rather than on the server-side. XSS in itself is a menace which is brought by the internet security weak point [...]