From the course: CompTIA Advanced Security Practitioner (CASP+) (CAS-004) Cert Prep

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Cross-Site Scripting (XSS)

Cross-Site Scripting (XSS)

From the course: CompTIA Advanced Security Practitioner (CASP+) (CAS-004) Cert Prep

Start my 1-month free trial Buy for my team

Cross-Site Scripting (XSS)

“

- In this lesson, we're going to discuss cross-site scripting, also known as XSS. Now, cross-site scripting is a malicious script that's hosted on an attacker site or coded inside of a link that's injected into a trusted site, designed to compromise the client that is browsing that trusted site. Now, this allows the attacker to circumvent the browser security model or trusted zones. Now, the attacker's goal in using cross-site scripting is to get you to run some kind of malicious script, so that your system will process this thing and bypass its normal security mechanisms. Cross-site scripting is a powerful exploit that relies on your website, not conducting proper input validation. If you're not doing proper input validation, you are most likely going to fall victim to a cross-site scripting attack. So, let's take a look at how cross-site scripting works in the real world by looking at the four basic steps of a cross-site scripting attack. First, the attacker identifies an input…

Contents