[OWASP-Chapters] Using XSS and the XML HTTP Request object to attack webservices from vulnerable

Eoin Keary eoinkeary at hotmail.com
Tue Jun 21 07:45:39 EDT 2005


Hi,
Im looking into the possability of Using XSS and the XML HTTP Request 
object(http://www.w3schools.com/xml/xml_http.asp) to attack webservices from 
vulnerable clients.
Like getting a client to attack a web service for you!?

The XML HTTP Request object can be used in client side script to call HTTP 
methods, using this to attack web services by injecting the attack script 
into a vulnerable site which a client browser shall then execute.

has anybody done this work already before I devote time to it?

Eoin

_________________________________________________________________
Create the ultimate online companion - meet the Meegos! http://meegos.msn.ie





More information about the Owasp-chapters mailing list