The growth path of penetration testing - front end security
Front end security
Professional NOUNexplainpayloadAttack codeEXPComplete vulnerability exploitation toolsPOCViewpoint verification procedure. Running this program can get the expected resultsGPCGET POST COOKIE
1. Cross site scripting attack
Cross site scripting (XSS) refers to a client-side code injection attack in which an attacker executes ...
Added by mrwutang on Thu, 03 Mar 2022 16:52:24 +0200
xss manual version of cross site script attack
definition
Cross site scripting (XSS): cross site scripting is a computer security vulnerability that often occurs in web applications. It allows malicious web users to implant code into pages provided to other users.
type
Storage (persistent) The cross site script can be injected into the file system or database of the server – lu ...
Added by LDM2009 on Thu, 10 Feb 2022 10:38:10 +0200
Code audit learning XSS
definition
Cross site scripting attack is not confused with css, so cross site scripting attack is abbreviated as XSS. XSS is a security vulnerability of Web application, which is mainly caused by insufficient filtering of user input by Web application. The malicious attacker inserts the malicious script code into the Web page. When the user b ...
Added by whizzykid on Sat, 05 Feb 2022 04:12:52 +0200
Network protection notes -- XSS vulnerability exploitation
Browser homology policy
summary
In 1995, the same origin policy was introduced by Netscape. At present, all browsers implement this policy. Initially, it means that the Cookie set by page A and page B cannot be opened unless the two pages are "homologous". The so-called "homology" refers to "three sameness": ...
Added by fahhem on Wed, 12 Jan 2022 20:15:02 +0200