The Samy worm at my space is now a classic, both a sophisticated attack and a well documented one, it became a case study in the web application security field. Recently Robert Hansen (RSnake) wrote a very interesting blog entry about Samy and what happened to him since.

Additional information:

• My Lunch With Samy [ha.ckers, Mar 10 2007]
• MySpace XSS worm writer notes [bindshell, Apr 10 2005]
• MySpace XSS worm source [bindshell, Apr 10 2005]
• MySpace XSS virus development [bindshell, Apr 10 2005]
• Cross-Site Scripting Worm Hits MySpace [Beta News, Apr 10 2005]

A proof of concept XSS worm crawled justin.tv, a popular lifecasting platform. The warm succeeded in planting a self replicating code on 2525 accounts in less than 24 hours before the vulnerability was fixed.

Additional information:

• XSS Worm At Justin.tv Affects 2525 Profiles [CyberInsecure, Jul 15 2008]