=

Cross-site Scripting (XSS)

Cross-site Scripting (aka XSS) is a web security vulnerability. In this vulnerability an attacker somhow execute their malicious javascript code in client's browser. Its a client side vulnerability because of execution of javascript in clients's browser.

    Contents :

  1. Prerequisite
  2. Types of XSS
  3. Impact if successful XSS

    Prerequisite :

  1. javascript
  2. Concept of request/response and databases

    Types of XSS :

  1. Reflected XSS
  2. Stored XSS
  3. DOM Based XSS
  4. Blind XSS

    Impact if successful XSS :

  1. Session hijacking
  2. Phishing and credential theft
  3. Social engineering
  4. Data exfiltration
  5. Malware installation
  6. Content manipulation and defacement