Master XSS(Cross Site Scripting) for real world Applications

Learn to Find,Build,Chain,Exploit Cross-Site scripting in real world applications for bug bounty

Created by: Anurag Verma
Instructor and Security Researcher

What Will I Learn?

• Find XSS(Cross Site Scripting) on real world applications
• Account takeovers via xss via different scenerios and custom payloads for them
• Learn the manual and automated ways to find xss with deeper analysis
• Learn to chain different vulnerabilities with cross site scripting(like file uploads and IDOR) and make good impacts
• Learn all the attacks possible with cross site scripting(like keystrokes hijacking and web defacing )
• Find multiple ways to bypass the restrictions
• Privilege escalations from xss via chaining vulnerabilities
• Out of band cross site scripting
• Learning from real world targets and quality labs

Requirements

• You should know basics of bug bounty like vulnerabilities related to OWASP TOP 10
• You should know basics of Burpsuite,basic linux commands
• If you know basics of programming ,HTML , css or basic development then it will be great
• should know the installation of tools like burpsuite,linux tools like waybacks,gau,gf etc

Target audience

• Beginners who are looking for more great resource for learning xss
• Intermediates who want to enhance power of finding xss vulnerabilities in real world applications
• Advance who are looking for more decent examples and scenerios
• Anyone from development side want to learn the exploitation via cross site scripting
• Bugbounty hunters
• Pentesters
• IT analysts
• Risk analysts
• Security Analysts
• Developers
• Security Engineers