Hacking - Introuduction to Cross Site Scripting (XSS)

• Report rights infringement
• published: 20 Dec 2013
• views: 59782

To learn more about Cross Site Scripting, check out my blog posts: http://calebcurry.com/introduction-to-cross-site-scripting-xss/ Cross Site Scripting is a method of hacking (cracking) used to change the code of a vulnerable website to include a malicious script. This website is then sent to other people to view which causes the script to be initialized. There are two main types of XSS attacks. The first is non persistent. This means that the data is only re-displayed on a specific page once through a URL. For example, the results of a search on a search engine displays the terms you searched for. If you can search for a malicious script which is then shown back to you on this trusted search engines website, then you have successfully done a cross site scripting attack. Non persistent attacks are the most common. The second type of attack is known as persistent. This means that the website takes the malicious script, saves it to the website's server, and re-displays it to any visitor viewing that page. An example of this would be a comment thread that saves your comment and adds it to the list of comments. If you can successfully hide a script within your comment, you have successfully done a cross site scripting attack. Persistent attacks aren't as common, but they are much more deadly. Another term you may like to know is self propagating worm. This means that anybody infected will also share this malicious script, so it spreads and stays alive without the work of the hacker. This is the most deadly form of XSS. More content! - http://CalebCurry.com Tech/Business Facebook - http://www.facebook.com/CalebTheVideoMaker Personal Twitter - http://Twitter.com/calebCurry Subscribe for more - http://bit.ly/PqPyvH Visit http://www.dreamhost.com/r.cgi?1487063 to get the best web hosting around for a cheap price!