XSS attack principles

XSS stands for cross-site scripting attacks. An attacker inserts malicious HTML tags or JavaScript code into a web page. When a user browses this page or performs some operations, attackers use users' trust in the original website to trick users or browsers into performing insecure operations or submitting users' private information to other websites.

For example: (1) Click a seemingly safe link and (2) transfer malicious forms to the attacker's server

Classification: (1) Storage XSS (2) reflective XSS

Learning recommendations:

Article 1: http://www.freebuf.com/articles/web/40520.html

Article 2: http://www.freebuf.com/articles/web/42727.html

XSS coding: http://www.freebuf.com/articles/web/43285.html

Application: http://blogread.cn/it/article/6919? F = wb2

XSS attack principles