Collected research

Adultspace XSS Worm

Adultspace XSS Worm ha.ckers.org web application security lab

Report of an XSS worm on Adultspace.com spreading through the site's forums and bulletin boards via XMLHTTPRequest, adding victims as friends so the attacker can view private photos. It uses no filter evasion and is easy to detect. The source was supplied as a zip by the finder, Luny.

Record

Document

Adultspace XSS Worm ha.ckers.org web application security lab

Published by

ha.ckers.org

Topic

XSS

In the archive

• Collected in the 2006 research round

Tags

• xss
• case-study
• javascript
• abuse-of-functionality
• detection
• owasp-a03-2021
• owasp-a04-2021
• owasp-a09-2021

This page is the archive's own catalogue record. The research is the work of ha.ckers.org, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.