Everand Logo

Welcome to Everand!

  • Discover millions of ebooks, audiobooks, and so much more with a free trial

    Only $11.99/month after trial. Cancel anytime.

    Introduction to Web Hacking: Cross-site Scripting
    Introduction to Web Hacking: Cross-site Scripting
    Introduction to Web Hacking: Cross-site Scripting
    Ebook44 pages18 minutes

    Introduction to Web Hacking: Cross-site Scripting

    By Gary Drocella

    ()

    Read preview

    About this ebook

    This E-book has been written as an introduction to web hacking for ethical hackers, pen-testers, cyber-security consultants, web developers, etc. who want to improve their skills, knowledge, and edification of cross-site scripting in order to harden web application security. This E-book is also useful for anyone who is particularly interested in cross-site scripting.
    LanguageEnglish
    PublisherGary Drocella
    Release dateAug 24, 2018
    ISBN9780692180969
    Introduction to Web Hacking: Cross-site Scripting

    Related to Introduction to Web Hacking

    Related ebooks

    Computers For You

    View More
    View More

    Related podcast episodes

    Related articles

    • Article

      Web App Security

      Jun 29, 2021

      Web App Security
      8 min read

    • Article

      Hacker Distributions

      Nov 17, 2020

      Hacker Distributions
      1 min read

    • Article

      Hacker’s Manual

      Mar 2, 2021

      Hacker’s Manual
      1 min read

    • Article

      Hack The Planet/Parrot

      May 31, 2022

      Hack The Planet/Parrot
      2 min read

    • Article

      Introducing Kali

      Mar 2, 2021

      Introducing Kali
      4 min read

    • Article

      Hacker’s Manual

      Nov 17, 2020

      Hacker’s Manual
      1 min read

    • Article

      From Child Hacker To Bug Hunter

      Mar 19, 2020

      Why did you become a black hat hacker? At school I would finish my work in ten minutes and spend the rest of the lesson playing on the computer. I was 10 or 11 when I stumbled across a chatroom whose members taught me how to hack – I was just a bore

      1 min read

    • Article

      Hack The System

      Dec 17, 2019

      If you followed our handy guide on the previous pages, then you’ll already have augmented your Kali Light installation with Nmap, a port-scanning utility par excellence and a vital part of any pen-tester’s arsenal. As mentioned on the DVD page (there

      4 min read

    • Article

      ‘Open Ports’ Leave a Hole in Smartphone Security

      May 8, 2017

      Smartphone apps that use “open ports” to share and receive data are more vulnerable to security breaches than previously thought, mainly due to the their widespread use in internet communication, a new study suggests. The vulnerability the researcher

      3 min read

    • Article

      “Someone Who Under Takes A Ransomware Attack Isn’t A Hacker, They’re An Attacker”

      Aug 12, 2021

      If you’ve ever attended an infosec or cybersecurity event, you will no doubt have noticed the preponderance of “Hacking is NOT a Crime” stickers. In 2018, some 500 such stickers were handed out at the DEF CON 26 event, the following year 5,000 were d

      7 min read

    • Article

      Social Engineering

      Oct 15, 2019

      Social Engineering
      5 min read

    • Article

      Network Attacks

      Sep 21, 2020

      Though less common than malware and social engineering, network-based attacks are still a threat to every computer and mobile user, and everyone should have at least a basic understanding of what they are and how to avoid them. So this month let’s lo

      4 min read

    • Article

      Kali Linux 2020.3 64-bit

      Nov 17, 2020

      Kali Linux 2020.3 64-bit
      3 min read

    • Article

      Revisiting Tor

      Aug 24, 2020

      Revisiting Tor
      4 min read

    • Article

      Wireshark 4.0.2

      Mar 7, 2023

      Wireshark 4.0.2
      2 min read

    • Article

      Sherlock

      May 31, 2022

      Sherlock
      1 min read

    • Article

      White Hat Hacking

      Apr 19, 2021

      There’s a school of thought that says we (or anyone) shouldn’t provide information that budding hackers could use to cause damage or distress. In February the UK’s West Midlands Regional Organized Crime Unit even launched a poster campaign naming and

      1 min read

    • Article

      Secure Your Servers

      Apr 7, 2020

      No matter what you do with your Linux servers you will almost certainly have SSH access to them. Indeed this might be the only access you have, so it would be wise to secure it. Naturally, you will already be using a strong password and will have alr

      4 min read

    • Article

      Hacking Power

      Jul 30, 2018

      Hacking Power
      4 min read

    Related categories

    Reviews for Introduction to Web Hacking

    0 ratings

    0 ratings0 reviews

    What did you think?

    Tap to rate

    Review must be at least 10 words

      Book preview

      Introduction to Web Hacking - Gary Drocella

      Introduction to Web Hacking: Cross-site Scripting

      Introduction to Web Hacking: Cross-site Scripting

      Gary Drocella

      Table of Contents

      Chapter 1 Introduction

      Chapter 2 Persistent Cross-site Scripting

      Section 2.1: Sample Vulnerable Web Application

      Section 2.2: MyBB Forum Plugin Case Study

      Chapter 3 Reflected Cross-Site Scripting

      Section 3.1: Sample Vulnerable Web Application

      Section 3.2: Monstra 3.0.4 Case Study

      Chapter 4 Cross-site Scripting Exploitation

      Section 4.1: Cookie Stealing

      Section 4.2 Social Engineering Script

      Chapter 5 DOM Cross-site Scripting

      Section 5.1 Sample Vulnerable Webpage

      Section 5.2 Yahoo! Case Study

      Chapter 6 Cross-site Security Mechanisms

      Section 6.1 Filtering Script Tags

      Section 6.2 Filtering Special Characters

      References

      Chapter 1 Introduction

      This book focuses on a particular type of web attack known as cross-site scripting.  This E-book discusses the different types of cross-site scripting attacks. You will also learn different ways of exploiting web applications that are vulnerable to cross-site scripting. Also, you will see sample code that is vulnerable to cross-site scripting, and case studies of real world applications that were vulnerable to cross-site scripting.  Once a cross-site scripting vulnerability is found in a web application, there are a number of ways to exploit it.

      Cross-site scripting is an injection type attack, in which malicious scripts are injected into an otherwise benign and trusted website [1].  This is the essence of hacking in general, which is basically putting code somewhere no one expected.

      Chapter

      Enjoying the preview?
      Page 1 of 1