Sarah Baso: Created page with "== Topic: Cross Site Scripting, Exploits and Defenses == ==Speaker: David Campbell == David Campbel is an infosec veteran, with experience ranging from penetration testing for..."

2011-05-31T18:38:31Z

Created page with "== Topic: Cross Site Scripting, Exploits and Defenses == ==Speaker: David Campbell == David Campbel is an infosec veteran, with experience ranging from penetration testing for..."

New page

== Topic: Cross Site Scripting, Exploits and Defenses ==

==Speaker: David Campbell ==

David Campbel is an infosec veteran, with experience ranging from penetration testing for Fortune 100's to architecting security solutions for large multinational financials to consulting for government agencies. DC is presently chapter leader of OWASP Denver and is Principal Consultant at Electric Alchemy.

== Abstract: Cross Site Scripting, Exploits and Defenses==

For a long time, the impact of XSS vulnerabilities has been grossly underestimated. Recent compromises, such as the pro-Hillary [http://cyberinsecure.com/hacked-obama-site-redirects-visitors-to-clintons-site/ defacement] of Barack Obama's website, and a [http://www.securescience.net/twoubledtwitter.html Viral XSS in Twitter] demonstrated the impact of XSS vulnerabilities to the masses.

During this presentation, David Campbell will demonstrate exactly how effective XSS vulns can be, and show you what you can do to protect yourself and your sites.

This presentation was originally delivered to OWASP Colorado in May of 2008, and has been updated for this session.

[https://www.owasp.org/index.php/Image:DC_ED_OWASP_XSS_MAY2008_v1.0.pdf Slide deck from May '08 talk]

Los Angeles/2009 Meetings/April 15 - Revision history

Sarah Baso: Created page with "== Topic: Cross Site Scripting, Exploits and Defenses == ==Speaker: David Campbell == David Campbel is an infosec veteran, with experience ranging from penetration testing for..."