A new website dedicated specifically to cross-site scripting(XSS) vulnerabilities, will soon be launched in BETA mode.

With a no-hat approach, and only for educational purposes, we will receive notifications of websites, web-based services and software applications that have been “XSSed“. When a cross-site scripting vulnerability is submitted – URL poisoning, frame injection and other vulnerabilities that can be exploited against users are also allowed – it will be saved automatically in the on-hold archive until review by our staff.

We classify the archived attacks into special (high-profiled) and not special. You can also view what was their unique Alexa pagerank at the time of submission.

Note: Script insertion vulnerabilities, which can lead to cross-site scripting, can also be used to damage a site by blocking its visual access. Please note that this could represent a crime in many countries and we do not support this action.

The goals of XSSed.com, are to provide helpful information resources on cross-site scripting (XSS) attacks and vulnerabilities, and to archive XSS vulnerable websites for statistic purposes. It is an attempt to spread education and awareness about XSS to IT professionals and amateurs interested in secure web application development.

Trackback This Post | Subscribe to the comments through RSS Feed