No video :(

Cross-site scripting explained | XSS attack | Stored | Reflected | DOM-based

Dev Academy

Подписаться 6 тыс.

Просмотров 2,7 тыс.

50% 1

Видео Поделиться Скачать Добавить в

Опубликовано:

27 авг 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 11

@stevee2993 4 года назад

I found a reflected xss in a website, what can i do? Can i use cookies to steal login credentials or is it for other types of xss?

@DevAcademyCom 4 года назад

With a reflected XSS vulnerability, you can send a link to a victim and steal cookies. If that cookie contains a session id, you can use it to impersonate that victim (use the user's account).

@stevee2993 4 года назад

Angular Academy ohhh thats nice, thank you so much for ur reply!!!

@albertobarbieri8280 3 года назад

Just ensure they are not HttpOnly or you will not be able to access it through javascript code.

@hobbyturystaSEO 4 года назад

2.04 tabel left hand side. We got server side xss and DOM based xx.... Can you told smth about virtual DOM based xss

@DevAcademyCom 4 года назад

I am not aware of virtual DOM-based XSS. Are you sure that there is such a variant?

@Cognitoman 4 года назад

Changing the JavaScript code in the dim only works on your webpage not others people as well right ?

@DevAcademyCom 4 года назад

Yes!

@milchstrasse8307 3 года назад

what frameworks don't sanitizate?

@hobbyturystaSEO 4 года назад

What about virtual DOM based?

@DevAcademyCom 4 года назад

What do you mean?