4MMSR-Network Security-2012-2013-taint assisted dom xss fuzzing

  Deuxième Année    Informatique    Sécurité    4MMSR-mini research project 

Taint Assisted DOM-XSS Fuzzing

This is a "mini" research project for the course 4MMSR-Network Security

Keywords

fuzzing,DOM/type-0 XSS,data tainting

Description

DOM XSS is an injection vulnerability for which few attack grammars do exist. The problem formalization can be derived from .

Expected output

• formalize the DOM XSS problem
• write a DOM-XSS attack grammar
• interface with Dominator Pro to obtain:
  • the number of tainted nodes
  • if a DOM XSS attack did occur or not (test verdict)

Research Questions

• propose a methodology for producing a DOM-XSS grammar

References

• DOM Based Cross Site Scripting or XSS of the Third Kind, Amit Klein, 2005
• Finding DOM XSS with Dominator Pro, Stefano di Paola, 2011
• XSS Vulnerability Detection Using Model Inference Assisted Evolutionary Fuzzing, Fabien Duchene & Sanjay Rawat & Roland Groz & Jean-Luc Richier, 2012
• SPaCIoS, D3.3 "Methodology and technology for vulnerability-driven security testing", section "An Evolutionary Smart-Fuzzing Approach for Detecting XSS Injections Attacks", 2013

Tools

• dominator pro

Results

{{{results}}}

Get Started!

• create an archive on the ensimag server, so that only your team members and I have access to it.
• Créer_une_archive_partagée_avec_Git
• obviously, do not forget to send me the path afterwards

Contacts

Fabien Duchene