XSS Cross Site Scripting Demonstration

Cross-site scripting ('XSS' or 'CSS') is an attack that takes advantage of a Web site vulnerability in which the site displays content that includes un-sanitized user-provided data. For example, an attacker might place a hyperlink with an embedded malicious script into an online discussion forum. That purpose of the malicious script is to attack other forum users who happen to select the hyperlink. For example it could copy user cookies and then send those cookies to the attacker. The Script Injection video should be watched before this video for greater understanding.

Category:

Science & Technology

Tags:

• XSS
• CSS
• Cross Site Scripting
• Imperva
• hack
• Web application

[benjabean1]

Problem is, CSS stands for two things.

[JLewinCO]

Thanks, I'm studying for Security Plus and the books I read didn't really give any real examples I could relate with. This did it for me. Good Work

[TheAnonrandomguy]

@shroomboy666 y

[shroomboy666]

@benjabean1 Counter Strike: Source?

[misterolichip]

@benjabean1 cascading style sheet and counter strike source?

[bitbreaker]

@bitbreaker Oh, and pardon my typos as well... I have better things to do with my time than troll videos and look to pick fights because I'm oh-so-intellectual and an arrogant bastard.

[bitbreaker]

@tomm174 Hello, dumbfuck. How are you doing? It has been a year since I posted that comment, I will agree with you that I did not know as much as I do now. If you don't bother check how old comments are, how do you know a person hasn't learn whether or not they were right when they even posted the comment? Oh, and bravo with your witty little insult... Fox News. If you want any respect, I suggest you off yourself and don't bother telling anyone... trust me... they won't care.

[tomm174]

@bitbreaker why bother talking if you don't know whether what you're saying is so or not.

All browsers potentially have this vulnerability.

This tutorial is explaining it to you.

Do you think maybe some browsers know the difference between user contributed & web-designer supplied javascript ?

You're not the only person who has ever loudly said something that's in plain contradiction to the facts (Fox News . . ). But if you want any respect I suggest you try to avoid doing it in future.

[rara12ify]

2nd Problem is, This is your site. How do we know that you didn't actually make the exploit in your site? Do another site. Then I'll believe you. But when you own a Site you know your exploits so Yeah.

[dbrunetti6770]

wt hell r u guys talking about!!! = )

[Shady2viewer]

well theres nothng serious happening on my pc but ccs is making my pc lag alot

[Diggler397]

Sometimes when I'm on Deviant Art it says "internet explorer has prevented cross site scripting" and when I'm on FIrefox or Chrome, it just puts them on my computer and I got a virus that way once. luckily I fixed it, but now I only get on DA with IE cuz it blockks it. thanks for letting me know what it is ^^