Abusing Internet Explorer 8's XSS Filters

http://p42.us/ie8xss/Abusing_IE8s_XSS_Filters.pdf

Summary

Internet Explorer 8 implements an anti Cross-site Scripting (XSS) mechanism to detect certain types of XSS attacks. This feature can be abused by attackers in order to enable XSS on web sites and web pages that would otherwise be immune to XSS.

---------------------------------

This information was presented @ Blackhat Europe by Eduardo Vela Nava (@sirdarckcat) and David Lindsay (@thornmaker)

The presentation slides and POCs can be found on their website....
http://p42.us/ie8xss/