Robert Hansen
“RSnake”The XSS Cheat Sheet
ha.ckers.org, Slowloris, and browser attack surface
Rating
85Impact score
Domains
Cross-site scriptingBrowser securityDenial of service
Scouting report
Ran ha.ckers.org and published the XSS cheat sheet, which for years was the reference list of filter-evasion payloads that every web application firewall was tested against. Co-authored XSS Attacks with Grossman, released Slowloris to demonstrate that a single machine could hold a web server’s connections open indefinitely, and co-wrote Detecting Malice on behavioural detection.
Curator’s note
The cheat sheet did more for input validation than any standards document.
Sources
- 01XSS Attacks: Cross Site Scripting Exploits and Defense books.google.com
- 02Slowloris (computer security) en.wikipedia.org