跨站脚本攻击XSS深入解析和防范XSS Survival Guide

跨站点脚本是每个严重的道德黑客都需要在其技能中拥有的一种漏洞类型。很多黑客可能听说过这种问题，或者非常肤浅，但是您知道XSS只是肤浅的吗？XSS可以在各种不同的上下文中发生，并且大多数课程仅专注于HTML注入方面，该课程旨在通过精心设计的实验室和易于理解的演示吸引您。最后，您将获得我的个人备忘单，以及一种被动和主动检查XSS漏洞的方法。您准备好升级XSS游戏了吗？

本课程适合那些想积极测试XSS或想要积极防御XSS的人。我们不仅要讨论XSS攻击的构成理论，还将通过在线免费视频资源上的指导视频形式向您展示，也将在一个指导性实验室中为您展示目标，一个要入侵的网站，仅此而已。

MP4 | Video: h264, 1280×720 | Audio: AAC, 48000 Hz
Language: English | Size: 1.70 GB | Duration: 2h 36m

What you’ll learn
General XSS Attack strategy
XSS Contexts
Reflected XSS
Stored XSS
DOM XSS
Several other advanced XSS techniques…
Requirements
Being able to read javascript
Description
What can i do for you?

Cross-site scripting is a vulnerability type that every serious ethical hacker needs to have in their skillset. A lot of hackers have probably heared of this issue type or know it very superficially but did you know XSS is anything but superficial?

XSS can occur in a range of different contexts and where mosts courses focus only on the HTML injection side of things, this course aims to draw you in with it’s playfully designed labs and easy to follow presentations.

In the end you’ll be treated to my personal cheat sheet as well as a way to passively and actively check for XSS vulnerabilities. Are you ready to level up your XSS Game?

This course is great of people who want to actively test for XSS or for people who want to actively defend from it.

Not only are we going to go over the theory of what an XSS attack consists of, we’ll be showing you as well in both a guided video form on some free pratice resources online but also in a guided lab which gives you an objective, a website to hack and that’s it.

Who am i?

The XSS Rat is an experienced bug bounty hunter and ethical hacker who is making it his life mission to educate people to help make the internet a safer place.

Who this course is for:
Developers looking to secure their code
Bug Bounty hunters who want to learn XSS
Pentesters looking to level up their XSS game