Advanced Stuff - XSS-Proxy and Javascript Remoting attacks
There's not a lot of info here yet as I'm still working on content that will be here soon. Best bet is to review my Shmoocon slides, read the Mini-Whitepaper, and download/play with the XSS-Proxy tool.
Here are my Shmoocon 2005 Powerpoint Slides on Advanced XSS attacks and XSS-Proxy
Here is the latest draft of my XSS Attacks mini-whitepaper
XSS-Proxy Project site for file downloads and other info