XSS Attacks

242 Chapter 6 9 XSS Exploited

var

URL = new Array(50) ;

var emailDump

= "" ;

target

= "ht tps : //xpre

s smai

i. c ingul ar.

com/subscriber/mbox,

stp

? s i d= 1 & 7" ;

loadTimer=8000

;

The URL array will hold the individual e-mail URL values that will be extracted from

the

mbox.stp

HTML. The

emailDump

variable will be the bin into which we will store the

HTML of each e-mail. Our initial target is the inbox, but this value can be changed to the

Documents.stp

Web page. And finally, the

loadTimer

value is the time it takes to safely extract

each e-mail.

Next we perform a couple