cross site scripting (xss)

cross site scripting meaning

infromation from one site could be share with another

what language does xss use

javascript

cross-site sripting process

attacker sends a link containing a malicious script to a victim

victim clicks link and visits legit site

legit side loads in the victim’s browser and malicious script is also executed

malicious script sends victim’s data to attacker

non persistent (reflected) xss attack

website allows scripts to run in user input like in a search box

persistent (stored) xss attack

attacker posts a message to a social network includingn the malicious payload sp everyone who visits the page will get that code

how to protect against xss

be careful when clicking untrusted links

disable javascript or control with an extension

keep your browser and applications are updated