Thursday, April 17, 2014

XSS variations

Three are three kinds of Cross-Site Scripting (XSS) attacks.

  1. Stored: an injected script is permanently kept at the server, perhaps in a database cell
  2. Reflected: are reflected to a target's victim off of an application ...could be an attack that causes a sinister error message to surface or an attack that forces a sinister email to be sent
  3. DOM-based XSS: entails handing in HTML script tags which will ultimately bubble back up to HTML and do something terrible

No comments:

Post a Comment