In this video, I walked through some penetration testing techniques for exploiting cross-site scripting(XSS) vulnerability using Metasploitable 2 DVWA machine.
This video is a form of journal and a way I practice what I've learnt.
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
DISCLAIMER:
This video is for educational purposes only and demonstrates general penetration testing techniques and procedures. I cannot be held responsible for any damage caused to your computer or software by following these steps. Use this information at your own risk. It is always advisable to seek professional assistance if you are not comfortable performing these procedures yourself. Additionally, some software and tools featured in this video may have specific licensing requirements or limitations. Please ensure you are using them in accordance with their respective terms of use.
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
#XSS #metasploitable #pentesting #php #linux #tutorial
0:00 Intro
0:50 What is cross-site scripting XSS?
1:37 How does XSS work?
3:05 Reflected XSS
3:40 Stored XSS
4:23 DOM-Based XSS
6:31 Reflected XSS Lab
8:00 Stored XSS Lab
10:28 Preventing XSS Attack
#XSS #XSS #metasploitable #linux •#webexploitation •#secureshell •#linuxtowindows •#browser •#burpsuite •#curls •#web •#cybersecurity •#offensivesecurity •#hacking
- - -
tryhackme ethicalhacking cybersecurity cybersec hacking informationsecurity pentesting ethicalhacking cybersecuritytraining learnhacking tryhackmecommunity tryhackmerooms cyberwarriors cyberattack cyberdefense cyberthreats cybercrime cyberawareness cyberhygiene cybersavvy cybereducation cyberskills linuxcommunity linuxusers linuxenthusiasts linuxmastery cyberninjas ninjaskills linuxsecrets hiddenfiles shellscripting capturetheflag adventofcyber attacksurfacereduction securityposture networksecurity cybersecurityprofessional phishing dosattacks vulnerabilityexploitation firewall intrusiondetection patchmanagement cyberdefence cyberresilience cybercrime informationsecurity cyberthreats cyberattack cyberprotect
kali linux
linux
nmap
ssl
http
https
ssh
telnet
chargen
port
port numbers
wireshark
- - -