Cross-Site Scripting Lab Breakdown: Reflected XSS into HTML context with nothing encoded

preview_player
Показать описание


Additional References for Further Exploration:

------------------------------------------------------------------------------
In this series, we take a look at Web Security Academy's Cross-Site Scripting (XSS) labs and break them down. The goal is to break down the concepts to not only get to the solution, but talk about methodology and the mental steps we take in order to discover these vulnerabilities in the wild.

Timestamps:
0:00​ Intro
0:33 What is Cross-Site Scripting?
1:38 Important Question to Answer
2:25 Reflected XSS
3:00 Lab Start: Basic XSS Enumeration
4:28 Final Payload
5:28 Recap
5:57 Outro

------------------------------------------------------------------------------

Music:

“Friends”
Produced by Hyper Potions

“High Noon”
Produced by Bankrupt Beats

“Snickers”
Produced by Epidemic Sound / Damma Beatz

“Ikebaby”
Produced by Robotprins
Рекомендации по теме
Комментарии
Автор

Great video Garr, good information here.

BCan
Автор

Instead of the vlaue (1) or (34) how can i inject a sentence in it? I need a sentence to pop up after copying the URL

jamallewis
Автор

Can u please make a video on http request smuggling

mereemail