XSS AJAX Key Logging / Blog Announcement

[ajohnson]

I'm not sure if my blog qualifies to be listed under "Links to cool sites," but I'm going to be a bit cavalier and go for it anyway.

I've finally got a couple interesting (IMHO) posts up, so I figured it'd be worth sharing now.

https://www.infosiege.net/2012/02/xss-ajax-key-logger/

https://www.infosiege.net/2012/02/covert-credential-logging-with-ajax/

Those posts were kind of random and spur-of-the-moment. There will likely be a few things like that sprinkled in over time, but I'm primarily going to focus on GSE and OSCE studies.

Also, please follow @infosiege and retweet a recent tweet or two. I feel so totally inadequate with followers ranking in the single-digits

Constructive feedback is definitely appreciated.

[MaXe]

Pretty cool, even though to me the mentioned blog entries aren't new, but it's a nice blog and great to see people highlight that XSS is more than session hijacking 

[ajohnson]

Right. I'm just starting to get into the web app side of things, so my intention was more seeing if I could do it without any reference (and without knowing if it was even possible). It wasn't intended to be ground-breaking research

My immediate goal is really to provide direction to people who are more-or-less at the same level as me and want to progress in a similar manner. I've found that providing instruction really helps reinforce the material for me (actually, that's basic psychology that applies to pretty much everyone else as well), so hopefully I'll be able to make some fairly significant strides while also helping others with their studies.

[MaXe]

Sounds great and yes, writing guides, articles, etc., improve your understanding of the topics if you put a lot of effort into it, so I can see it's a great way to improve not only your own knowledge but also others.