CROSS SITE SCRIPTING AND CROSS SITE REQUEST FORGERY A DANGEROUS COMBINATION

No ratings

Presented at Saintcon 2015 by

Lance Buttars

Cross Site Scripting is a vulnerability where an attacker can injecting malicious scripts in web pages which are then served to other users over a period of time. Cross Site Request Forgery is a type of attack that occurs when a malicious url or web request executed by a user’s Web browser can perform an unwanted action on a trusted site for which the user is currently authenticated. Used in conjunction these two attacks can be devastating. This presentation will give concrete examples of both of these attacks and provide details on how to defend against them.