HTML5 Storage Exfil via XSS - Tradecraft Security Weekly #23
12 de ene. de 2018 ·
14m 30s
Regístrate gratis
Escucha este episodio y muchos más. ¡Disfruta de los mejores podcasts en Spreaker!
Descarga y escucha en cualquier lugar
Descarga tus episodios favoritos y disfrútalos, ¡dondequiera que estés! Regístrate o inicia sesión ahora para acceder a la escucha sin conexión.
Descripción
It is fairly common for pentesters to discover Cross-Site Scripting (XSS) vulnerabilities on web application assessments. Exploiting these issues potentially allow access to a user's session tokens enabling attackers to...
mostra más
It is fairly common for pentesters to discover Cross-Site Scripting (XSS) vulnerabilities on web application assessments. Exploiting these issues potentially allow access to a user's session tokens enabling attackers to navigate a site as the victim in the context of the web application. In this episode the hosts Beau Bullock (@dafthack) & Mike Felch (@ustayready) demonstrate how to exploit a XSS vulnerability to access HTML5 local storage to steal a cookie. (Sorry the camera video feed froze at 9 minutes)
mostra menos
Información
| Autor | Security Weekly |
| Organización | Security Weekly |
| Página web | - |
| Etiquetas |
Copyright 2024 - Spreaker Inc. an iHeartMedia Company
