Cross Site Scripting – Insecure Lab

Yahoo Account Exploit Selling on Black Market

28-November-20125-December-2012 Prasanna Sherekar

Yahoo is investigating the claims of a hacker who is selling an exploit that apparently hijacks Yahoo mail accounts. The exploit, being sold for $700 by an Egyptian hacker on an exclusive cybercrime forum, targets a cross-site scripting (XSS) weakness in yahoo.com that lets attackers steal cookies from Yahoo! Webmail users. Such a flaw would […]

Excess2 – Webmail XSS Tester

12-January-201117-January-2011 Prasanna SherekarLeave a Comment

Here is a script to automate testing of webmail systems for cross-site scripting. It uses XSS Cheat Sheet to generate the injection strings. Compared to the previous version this version downloads XSS cheat sheet on the fly (instead of having it hard-coded) and supports SMTP authentication. Name: excess2 – A script for testing webmail systems […]