WebSecureViz

Interactive Security Learning

Catalog
Web Security Visualizer
Step 325–30 minutes

Cross-Site Scripting (XSS)

XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a different end user.

VISUALIZATION: REFLECTED XSS
Attacker
Victim
Vulnerable Server
BROWSER RENDERER
Waiting for response...
Attacker crafts a link containing a malicious script in the URL parameters.

Mastery Goals

Identify and prevent reflected, stored, and DOM-based XSS

  • Reflected XSS
  • Stored XSS
  • DOM-based XSS
  • output encoding vs input validation

Ready to move on?

Mark this section as complete to track your progress through the curriculum.

Next Topic