Tuesday, 27 November 2018

XSS (cross site scripting)


It is computer vulnerability usually found in web applications.
XSS allows attacker to inject client side scripts into web pages viewed by other users.

TYPES OF XSS

Persistent


  • Persistent is a type of XSS vulnerability arise when the data provided by the attacker is saved on the server & permanently showed on normal pages returned to the other users.


Non-persistent


  • Non-persistent is the basic type of web vulnerability.This loopholes show up when the data provided by the client is users immediately by the server side scripts to change & display a page of results to the user without sanitising request.


Self-XSS


  • Self-XSS is the form of XSS vulnerability which depends on social engineering to trick the victim to execute malicious Js code in to their browser.


Mutated XSS(mxss)


  • MutatedXSS is the type of XSS vulnerability usually happens when the attacker injects something that is apparently safe but rewritten & changed by browser while analysing the markup.

No comments:

Post a Comment

recent blogs

Phishing                           Phishing is an act of stealing someone’s personal information such as usernames, passwords...