Training Overview
The "Cross-Site Scripting (XSS)" training provides a comprehensive understanding of XSS attacks, which are commonly seen in web applications and pose significant security risks, and how to protect against them. The training begins with an explanation of what XSS is and why it is dangerous, and then focuses on different types of XSS, such as Reflected, Stored, DOM, and Blind XSS.
What you will learn
- The different types of XSS attacks (Reflected, Stored, DOM, and Blind).
- How to perform session hijacking by stealing cookies.
- How to create effective XSS payloads to bypass filters.
- The fundamentals of preventing XSS vulnerabilities in web applications.
Tools you will use
- Burp Suite
- OWASP ZAP
- Browser Developer Tools
- Various XSS payload lists
Prerequisites
- A basic understanding of HTML and JavaScript.
- Familiarity with how web browsers and servers communicate (HTTP).
- Prior experience with a web proxy like Burp Suite is helpful but not required.
Who this is for
- Web Developers aiming to write secure code.
- Penetration Testers specializing in web applications.
- Bug Bounty Hunters searching for web vulnerabilities.
- Application Security Engineers.
Training sections
- 1Introduction
- 2Reflected XSS
- 3Stored XSS
- 4DOM-based XSS
- 5Blind XSS
- 6Common XSS Payload List
- 7Session Hijacking Attack
- 8XSS Vulnerability Scanning Tools
- 9Exam
Continue learning
Practice the topic in a lab or continue with a related Hackviser guide.