Other nomination

XSS-Track: How to quietly track a whole website through single XSS

One XSS on one page is turned into site-wide surveillance. The payload hides the page, opens a full-window borderless iframe on the same origin, and survives navigation because only the iframe reloads. Same-origin access lets its onload handler hook every link and form, log clicks, form values and selected DOM content, and report by XHR or image beacon.

In the archive

• Nominated for the 2010 Top 10 Web Hacking Techniques

Related sources

• Complete research source

Tags

• xss
• iframe
• javascript
• dom
• info-leak
• same-origin-policy
• ui-redress
• tooling
• owasp-a01-2021
• owasp-a03-2021
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.