• Post category:StudyBullet-3
  • Reading time:5 mins read


Digging up the dark corners of XSS

What you will learn

General XSS Attack strategy

XSS Contexts

Reflected XSS

Stored XSS

DOM XSS

Several other advanced XSS techniques…

Description

What can i do for you?

Cross-site scripting is a vulnerability type that every serious ethical hacker needs to have in their skillset. A lot of hackers have probably heared of this issue type or know it very superficially but did you know XSS is anything but superficial?

XSS can occur in a range of different contexts and where mosts courses focus only on the HTML injection side of things, this course aims to draw you in with it’s playfully designed labs and easy to follow presentations.

In the end you’ll be treated to my personal cheat sheet as well as a way to passively and actively check for XSS vulnerabilities. Are you ready to level up your XSS Game?

This course is great of people who want to actively test for XSS or for people who want to actively defend from it.


Get Instant Notification of New Courses on our Telegram channel.


Not only are we going to go over the theory of what an XSS attack consists of, we’ll be showing you as well in both a guided video form on some free pratice resources online but also in a guided lab which gives you an objective, a website to hack and that’s it.

Who am i? 

The XSS Rat is an experienced bug bounty hunter and ethical hacker who is making it his life mission to educate people to help make the internet a safer place.

English
language

Content

What is XSS?
What is XSS?
What is XSS
XSS Filter Evasion Techniques
XSS Filter Evasion Techniques
VB XSS
VB XSS
Reflected XSS
Reflected XSS
Stored XSS
Stored XSS
Stored XSS
DOM XSS
DOM XSS
Advanced XSS Techniques
Advanced XSS Techniques
CSS XSS
CSS XSS
Analyzing JS files
Analyzing JS files
XSS Cheat Sheet
XSS Cheat Sheet
XSS Attacks demonstrated
The anatomy of an XSS attack vector
Hacktivity explained
XSS Via reflected canonical tags on the portswigger labs
XSS passive testing methodology demonstrated
XSS CSP Bypass
HTML5 XSS attack vectors explained
XSS Tag and event filter evasion techniques with burp suite
XSS through Iframe injection
Labs