Cross Site Scripting (XSS) tutorial for Beginners

// Membership //

// Courses //

// Books //

// Social Links //

// Disclaimer //
Hacking without permission is illegal. This channel is strictly educational for learning about cyber-security in the areas of ethical hacking and penetration testing so that we can protect ourselves against the real hackers.

[Bipantheytbr]

Loi is our best uncle who always has surprised us with his contents.

[noobintheinternet]

Me trying to recognise which video is flipped and which video is original

[felixmilome]

For beginners??? Could you do one for dummies?

[VickMu-td]

Hi hacker loi, , , I'm trying to setup my apache2 webserver and it isn't responding, , , it is depicting an error what could be the problem

[comosaycomosah]

damn son you almost have a million subscribers! your videos are on point!

[xnuvers]

Can you give me tutorial about vulnerable XST (cross site tracing) ? Method Trace is Allowed

[dimosthenistsirogiannis]

Yes but you should run the xss payload to his computer for the reflected cross site scripting? How will you get the cookies from a specific person

[vali]

how can i get that same site for me to try i cant find it

[ssenyondwafred]

Tht website had no domain name in the URL, it was using just ip Adress, can it apply to an HTTPS website?😊

[suzonmaruf]

how did you install orange hrm on kali? Please give a tutorial on that.

[laxmiprasanna]

So to do XSS, the hacker needs to be already there in your computer ? Can a website from one tab attack another ?

[termireum]

Hi Mr. Loi
I really enjoy watching your videos, just got $$$$ bounty few weeks ago after watching your video about XSS.
Can you upload a video about WEB3 vulnerabilities such as reentrancy attack etc etc? Thanks.

[nonsense]

You make it look. So easy. 😮 Mr loi. Very interesting. Keep up. The grate work. And easy to follow instructions

[ThePrryns]

Hi, please can you do a video on how to do XSS bypass filters? If the javascript has "<, >, /, script, and alert"... How do I even create a popup box in the search query when these are not allowed. Also, without using Kali Linux or python.

[nirbhaymishra]

Very Information and Interesting
Thanks for sharing ❤

[areoglass]

from what i know, like on 2010 - 2013/2015 it was so much easier to hack and ddos websites

[rojoroj]

Sir, can make videos on what are the different ways u can access to anyone's whatsapp with or without target phone. And also steps to avoid such attacks ...

[foydoitro]

Can you hack car when breaking 1Million subscribers🥳

[yoshimochii]

may I ask how did to access the site you're using?

[oxy_]

thats why i make sure to validate my webapp(s) query string before processing