Cross-site scripting (XSS)
Cross-site scripting (XSS) is a vulnerability found on web applications. XSS allows attackers to inject scripts into the website. These scripts can be used to manipulate the web server, or the clients connecting to the web server.
Cross-site scripting has accounted for a large majority of popular web-based attacks. Many times when my team is requested by customers to examine compromised web servers that have had data stolen, it has been a result of cross-site scripting. Cross-site scripting attacks have resulted in attackers defacing websites, distributing malware to clients, and stealing sensitive information from websites, such as credit card and other personal identifiable information.
One method to check for cross-site ...
Get Web Penetration Testing with Kali Linux now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
