Top 10 winner

Large Scale Detection of DOM based XSS

Sebastian Lekies, Ben Stock and Martin Johns · ACM CCS 2013 · 4 November 2013

Chromium's V8 engine and its WebKit DOM were patched to track taint byte by byte, so every character arriving at a sink carried its source and any encoding applied. Knowing the exact syntactic context let the tool build break-out payloads that proved execution instead of guessing. Crawling 504,275 pages from the Alexa top 5000 produced 24.4M flows and 6,167 confirmed DOM XSS on 480 domains.

Record

Researcher

Sebastian Lekies, Ben Stock and Martin Johns

Published by

ACM CCS 2013

Date

4 November 2013

Format

Whitepaper

In the archive

• Ranked #8 in the 2013 Top 10 Web Hacking Techniques

Tags

• xss
• static-analysis
• javascript
• large-scale-scan
• measurement-study
• tooling
• owasp-a03-2021

This page is the archive's own catalogue record. The research is the work of Sebastian Lekies, Ben Stock and Martin Johns, first published at the original source. Preserved copies are kept so the citation survives its host.