XSS Survival Guide

Explore HTML context in cross-site scripting by injecting simple HTML, tracking where it lands, and examining cookie security, including http only flags that limit JavaScript access.

Explore HTML comment context in cross-site scripting, escape comments to reveal reflected values, and trigger alerts via a broken image with an error handler to demonstrate XSS contexts.

Explore how HTML tag attribute injection works by breaking out of attribute contexts using quotes to insert JavaScript and trigger alerts, with emphasis on testing single and double quotes.

Explore how JavaScript context in the dom reveals cross-site scripting opportunities by injecting code that triggers alerts, illustrating dom xss and the importance of secure scripting.

Learn reflected cross-site scripting, how unsanitized inputs reflect in responses, and how to test with black-box, gray-box methods, filter evasion, and context-specific payloads.

Stored cross-site scripting stores malicious input in the database and reflects it to users, often in admin areas, with filter evasion and tools like beef and xss hunter.

Learn advanced XSS filter evasion techniques, including encoding tricks, null bytes, case manipulation, and event handlers, to bypass web app filters during testing.

Explore vb xss and unsanitised input risks. See an MVC example with a broken image tag triggering scripts, and learn defenses and encoding across the view and controller.

Learn to identify dom cross-site scripting by tracing sources to sinks in the dom, distinguishing reflected and stored variants, and testing with developer tools.

Examine how filters block script alerts in xss tests and illustrate bypass techniques using image source with error and alert, then switch to a confirm payload to bypass the block.

The developers have gotten a bit smarter and added a confirm, but it won't work here, so we switch tactics and use a param to pop out cross-site scripting again.

Convert input to lowercase to reveal script patterns such as script and alert, demonstrating how to detect them and block malicious content.

Demonstrates bypassing filters in xss testing by replacing the greater-than sign with encoding and an html entity, then triggering an alert via an image tag's onerror payload.

Explore how the less than sign, semicolon, and image tag enable XSS by manipulating a broken image source and triggering an alert via the error attribute.

Double euro decoding reveals an XSS vulnerability by encoding inputs and triggering server side double decoding, and shows a normal attack vector won't work in this case.

In this lab, block parentheses to prevent script input, show how encoded entities can trigger an alert, and demonstrate practical techniques for mitigating XSS.

Demonstrates cross-site scripting filters and reflected input in source code, showing how fname can trigger an XSS attack. Stresses vigilance for sporadic XSS occurrences.

Explore cross-site scripting; script and alert are filtered out, while a prompt leads to cross-site scripting again.

The lecture shows that XSS attack vectors containing the word 'confirmed' are filtered, so use 'prompt' instead; 'script' and 'alert' are also filtered, and the prompt pops up.

Examine how an input field automatically converts all input to lower case and how existing filters remain in effect, highlighting the impact of case transformation on XSS filters.

Demonstrate how html entities can bypass input filters in xss defenses, showing that greater-than signs are stripped in comments while encoded entities can still trigger alerts.

Discover how script, alert, and prompt are filtered in xss contexts, showing that prompt may work for 25 while alert and confirm are blocked.

Investigate xss attack vectors in a lab using spg techniques and encoded inputs to load prompts and alerts, highlighting practical attack methods.

Demonstrate cross-site scripting in the HTML attribute context by manipulating an input value, escaping quotes, and breaking out with a single quote to inject a script alert.

Explore how attackers bypass alert blocks by using a broken image source to trigger a confirm dialog in the XSS survival guide.

See how a sturdy filter blocks script, alert, and confirm, and how an attack vector can trigger a prompt, prompting developers to stop using confirm alerts and scripts.

Explain how uppercase character filtering reshapes xss attack vectors, noting that uppercase-based exploits no longer work, and that some previous vectors may still apply only because uppercase vectors were disabled.

Reveals how greater-than signs are filtered in the xss survival guide, lecture 34, while HTML entities bypass filters to trigger a prompt, using prompt instead of alert or confirm.

Demonstrate how swapping single and double quotes in HTML attribute values enables xss testing, and how onerror prompts reveal vulnerabilities.

The lecture demonstrates replacing greater-than and less-than signs in input, showing all such signs get replaced and that the less-than sign must be replaced as well.

Explore advanced cross-site scripting techniques, including AngularJS sandbox bypasses, CSP concepts and bypass methods, dangling markup injections, and XSS chaining to increase exploit impact during hunting.