IEFD Ep. 13 - Website Hacking - XSS part 2

In this episode of Full Disclosure we are explaining the website attack known as Cross-Site Scripting (XSS). Cross-Site Scripting is a type of security vulnerability that affects web applications that do not sanitize user input properly. This kind of vulnerability allows an "attacker" to inject HTML or client side script like JavaScript into the website. Cross-Site Scripting is most commonly used to steal cookies. Cookies are used for authenticating, tracking, and maintaining specific information about users; therefore, by stealing a user's cookies an attacker could bypass the website's access control. There are three types of XSS attacks: Persistent, Non-Persistent, and DOM-Based. In this episode we will cover Persistent and Non-Persistent Cross-Site Scripting attacks.

Part 2 of 2

www.InfinityExists.com

Category:

Howto & Style

Tags:

• Infinity
• Exists
• Full
• Disclosure
• Website
• hacking
• XSS

[henrythesteinberg]

1337 video is 1337

[NinjasKill112233]

you kick so much ass...

wheeeee, i got bored and was playing with the alerts lol.

[kazio1620]

Please destroy this page, will pay for the lpg-diesel.pl

[mrbushcraftman1]

So if you put the hex code after any website would it still capture the cookies?

[Bilibilal]

dude you guyz are awsome!

[marcosfaria2]

how can i upload shell by xss?

[oliverxboxable]

what does it mean if a non persistent website accepts HTML but completely filters javascript.

[funnymoments007]

what is the password for the user account

[Timthesniper555]

This shit is so interesting

[PSYKOMANTISLEGEND]

anonymous

[12hasim34]

you fucking smart dude

[ciaranst]

@NOJESSICA

Of course it is they would have your ip