Detect the XSS Vulnerability
XSS(Cross-Site Scripting) is a security vulnerability found in a web application that allows an attacker to inject client-side script(Ex. JavaScript) to a webpage through input areas like a search box, forms, file upload and execute it at user’s end without authorization. The severity of cross site scripting attack can range from showing the useless alert box to stealing cookies, user’s session ids & take over the account. You need to perform 4 XSS attacks as follows:
- Create an alert box saying "HACKED".
- Change the background color of the website to "RED" .
- Change the background of the website to an image of your choice.
- Redirect the website to another page saying "You Are Hacked"(You can use HTMLPASTA to create your own page and redirect it to the vulnerable web app).
Keep your attack limited to the website provided to you. Please do not perform any type of XSS attack in someone else's website.
Deliverables:
Share the Screenshots of all 4 attacks in a PDF/Word file. Below the screenshots write the code snippet that you used to execute the preceding.
Contact Mentor:
Please do not copy someone else's work from the internet. If you have doubts contact the Fedora Summer Coding group using telegram. If you are not already a member you can join the group https://t.me/fedoraSummerCoding
Task tags
Students who completed this task
Task type
- code Code
- done_all Quality Assurance