• Labs
    • Learning Paths
    • CybrBits
    • All Courses
    • Join Discord
    • Contact & Support
    • Blog
    • Cheat Sheets
    • Ebooks
    • Podcasts
    • Webinars
  • Pricing
    • Training
    • Hosted Labs
    • Consulting
Sign in Sign up
Cross-Site Scripting (XSS): The Practical Guide

12 sections · 38 lessons

  • Video
  • Reading
  • Premium
  1. 1 Getting Started
    1. Video: About the course Preview
    2. Video: About the author Premium
  2. 2 What is Cross-Site Scripting (XSS)?
    1. Video: XSS concepts Preview
    2. Video: XSS types Premium
    3. Reading: Case studies Premium
  3. 3 Creating our lab environment
    1. Video: Creating our lab environment Premium
  4. 4 Reflected XSS
    1. Video: Manual attacks Premium
    2. Video: Automated attacks Premium
  5. 5 Stored (Persistent) XSS
    1. Video: Manual attacks Preview
    2. Video: Automated attacks Premium
    3. Reading: Case study: Stored XSS in image alt attribute Premium
  6. 6 DOM-based XSS
    1. Video: Manual attacks Premium
    2. Reading: Automated attacks Premium
  7. 7 postMessage XSS
    1. Video: postMessage explained Premium
    2. Video: postMessage XSS Premium
    3. Video: postMessage XSS demo lab Premium
    4. Video: postMessage XSS prevention Premium
  8. 8 Blind XSS
    1. Video: What is blind XSS? Preview
    2. Video: XSS Hunter Premium
  9. 9 Using BeEF
    1. Video: BeEF setup Premium
    2. Video: BeEF walkthrough Premium
    3. Video: BeEF hook Premium
    4. Video: BeEF target exploitation Premium
  10. 10 Attacking a web application (OWASP Juice Shop)
    1. Video: Information gathering Premium
    2. Video: DOM-based XSS attacks Premium
    3. Video: Reflected XSS attacks Premium
    4. Video: Persisted XSS attacks Premium
  11. 11 Defending against XSS
    1. Video: Preventing XSS Premium
    2. Video: Vulnerable and safe code examples Premium
    3. Reading: Web Application Firewalls Premium
    4. Video: Stored and Reflected prevention rules Premium
    5. Video: DOM-based prevention rules Premium
    6. Video: Common problems with mitigating DOM-based XSS Premium
    7. Video: Bonus rules Premium
    8. Video: How to review code for XSS vulnerabilities Premium
    9. Video: OWASP testing guides Premium
  12. 12 Conclusion and additional resources
    1. Reading: Additional resources Premium
    2. Reading: What now? Premium

Section 12 · Conclusion and additional resources

What now?

Christophe Limpalair

Christophe Limpalair

Premium

This lesson is part of a Premium course

Join Premium to open it, along with every course, practice exam and hands-on lab on Cybr.

View Plans Already a member? Sign in
  • Video lessons with full transcripts
  • Hands-on labs in real cloud accounts
  • Practice exams with explanations
PreviousAdditional resources
Course overview Cross-Site Scripting (XSS): The Practical Guide