The Samy worm at my space is now a classic, both a sophisticated attack and a well documented one, it became a case study in the web application security field. Recently Robert Hansen (RSnake) wrote a very interesting blog entry about Samy and what happened to him since.
Additional information:
- My Lunch With Samy [ha.ckers, Mar 10 2007]
- MySpace XSS worm writer notes [bindshell, Apr 10 2005]
- MySpace XSS worm source [bindshell, Apr 10 2005]
- MySpace XSS virus development [bindshell, Apr 10 2005]
- Cross-Site Scripting Worm Hits MySpace [Beta News, Apr 10 2005]