hey everybody, i'm looking for a tutorial to make a demo about cross site scripting, including javascript. I know very little or nothing about html or javascript. Thanks for advance

Question

heisenberg · Answer

not sure about any tutorials, but what are you trying to accomplish? do you mean ajax calls? you should look at jquery ( http://www.jquery.com/). it's a really great javascript framework that makes these things a lot easier.

anonymous · Answer

what i need is to make a xss vulnerable web page using javascript to show how to exploit that vulnerability, thank you so much heisenberg

anonymous · Answer

till now what i know is that i need a combination of html, javascript and DOM,  but i don't kcnow exactly what kind of tools should i use. I'm reading about jquery right now ...

anonymous · Answer

i have netbeans, i found that it has support for javascript, i think its a nice alternative

shadowfiend · Answer

To be vulnerable to cross-site scripting, you just need to allow an arbitrary user to enter code into your database that has unescaped HTML. That user can then insert a script tag that calls out to another site's JS to maliciously capture the current user's information.

anonymous · Answer

hey guys, let me tell you that finally i found the answer and it was kind of simple, a nice approach to learn how xss works could be by means of this tool, namely xampp, its a tool that incorporates apache, filezilla and many more services. Additionally it has some built in resources as vulnerable web blogs, in which i could learn how to steal cookies through xss.