Cross-site scripting attack principles of reflected XSS attacks

Cross-site scripting attack principles of reflected XSS attacks

XSS

Experiment Principle
XSS is also called Cross Site Scripting (CSS. A malicious attacker inserts malicious code into a Web page. When a user browses this page, the html code embedded in the Web page is executed, this achieves the Special Purpose of malicious attacks to users. In the XSS attack mode, you must cheat the user to click a link to trigger XSS.

Procedure

1. Open the site
1. Enter "hello" in the form and click "Submit". The output result is normal without any other impact.

2. Enter XSS code in the site
2.1 enter the XSS code '<script> alert ('hello') </script>' in the form and click Submit]

2.2 As you can see, when XSS code is submitted, a dialog box is displayed in the browser, showing the content we entered.

2.3 This is a simple XSS reflective demonstration.