Cross-site Scripting attacks (XSS attacks) are listed as the top widespread and critical weakness that can be discovered and exploited as software vulnerabilities. When designing web applications programmers and analysts must follow secure coding rules and try not to leave any loopholes. Experience is a great factor and programmers are unable most of the times to spot all the weak points in an online application. In this chapter we present a tutorial on launching XSS attacks along with the mitigation actions. The chapter covers both theoretical and technical aspects of XSS attacks and can be used as a self-learning or teaching tool for security students or professionals.

Although sufficient authentication mechanisms were enhanced by the use of two or more factors that resulted in new multi factor authentication schemes, more sophisticated and targeted attacks have shown they are also vulnerable. This research work proposes a novel two factor authentication system that incorporates honeytokens into the two factor authentication process. The current implementation collaborates with Google authenticator. The novelty and simplicity of the presented approach aims at providing additional layers of security and protection into a system and thus making it more secure through a stronger and more efficient authentication mechanism.