Posts: 861 Threads: 0 Joined: N/A       November 19, 2022 at 11:30 PM Maybe don't use an automated xss tool and try to xss it by yourself you would learn more I have quit due to abuse from mods. I will be back some day Posts: 17 Threads: 0 Joined: N/A November 21, 2022 at 7:49 PM (November 15, 2022, 02:02 PM)lord_x Wrote: Hello!
Today I will show u how to detect XSS vulnerability in some site with automated tool and Kali Linux.
We will consider the following points:
[1] XSS - Introduction for newbies
[2] Automated XSS tools for scanning
[3] Testing...
Introduction
> Cross-site Scripting (XSS) is a client-side code injection attack. The attacker aims to execute malicious scripts in a web browser of the victim by including malicious code in a legitimate web page or web application. The actual attack occurs when the victim visits the web page or web application that executes the malicious code. The web page or web application becomes a vehicle to deliver the malicious script to the user’s browser. Vulnerable vehicles that are commonly used for Cross-site Scripting attacks are forums, message boards, and web pages that allow comments. A web page or web application is vulnerable to XSS if it uses unsanitized user input in the output that it generates. This user input must then be parsed by the victim’s browser. XSS attacks are possible in VBScript, ActiveX, Flash, and even CSS. However, they are most common in JavaScript, primarily because JavaScript is fundamental to most browsing experiences.
Enjoy! 🙄 Thank you, best Posts: 29 Threads: 0 Joined: N/A November 27, 2022 at 6:24 AM (November 15, 2022, 02:02 PM)lord_x Wrote: Hello!
Today I will show u how to detect XSS vulnerability in some site with automated tool and Kali Linux.
We will consider the following points:
[1] XSS - Introduction for newbies
[2] Automated XSS tools for scanning
[3] Testing...
Introduction
> Cross-site Scripting (XSS) is a client-side code injection attack. The attacker aims to execute malicious scripts in a web browser of the victim by including malicious code in a legitimate web page or web application. The actual attack occurs when the victim visits the web page or web application that executes the malicious code. The web page or web application becomes a vehicle to deliver the malicious script to the user’s browser. Vulnerable vehicles that are commonly used for Cross-site Scripting attacks are forums, message boards, and web pages that allow comments. A web page or web application is vulnerable to XSS if it uses unsanitized user input in the output that it generates. This user input must then be parsed by the victim’s browser. XSS attacks are possible in VBScript, ActiveX, Flash, and even CSS. However, they are most common in JavaScript, primarily because JavaScript is fundamental to most browsing experiences.
Enjoy! 🙄 thanks Posts: 10 Threads: 0 Joined: N/A November 27, 2022 at 11:30 AM (November 15, 2022, 02:02 PM)lord_x Wrote: Hello!
Today I will show u how to detect XSS vulnerability in some site with automated tool and Kali Linux.
We will consider the following points:
[1] XSS - Introduction for newbies
[2] Automated XSS tools for scanning
[3] Testing...
Introduction
> Cross-site Scripting (XSS) is a client-side code injection attack. The attacker aims to execute malicious scripts in a web browser of the victim by including malicious code in a legitimate web page or web application. The actual attack occurs when the victim visits the web page or web application that executes the malicious code. The web page or web application becomes a vehicle to deliver the malicious script to the user’s browser. Vulnerable vehicles that are commonly used for Cross-site Scripting attacks are forums, message boards, and web pages that allow comments. A web page or web application is vulnerable to XSS if it uses unsanitized user input in the output that it generates. This user input must then be parsed by the victim’s browser. XSS attacks are possible in VBScript, ActiveX, Flash, and even CSS. However, they are most common in JavaScript, primarily because JavaScript is fundamental to most browsing experiences.
Enjoy! 🙄 awdawdawd Posts: 10 Threads: 0 Joined: N/A November 27, 2022 at 11:32 AM Thanks,great post Posts: 3 Threads: 0 Joined: N/A November 27, 2022 at 1:58 PM Le' me get a sneaky peaky Posts: 14 Threads: 0 Joined: N/A November 27, 2022 at 2:41 PM cheers dude this vulnerable is greatest one's Posts: 77 Threads: 0 Joined: N/A November 28, 2022 at 12:52 AM Thank you!!! Posts: 9 Threads: 0 Joined: N/A November 28, 2022 at 12:54 AM Thank you brother Posts: 94 Threads: 0 Joined: N/A November 28, 2022 at 1:04 AM many thanks bro |
