Very Basic XSS [For Begginers]

by DarkPhazed

Title:Very Basic XSS [For Begginers]
Author:DarkPhazed
Date:1/03/08
Notes:I am still a newbie at XSS, but have found many

1.Do a google dork [Scroll to bottom for links]
2.Find a target and do this eg.http://site.com/index.php?title=<script>alert('XSS Exploit');</script>
3.If there is a XSS Vuln then it will show a box which will say 'XSS Exploit'
4.If it did not work' it may just reload the site, but you just need to keep looking!

FAQ:
Q:Where is the google dork
A:Below the Faq

Q:A box came up and it said 'XSS Exploit'
A:Congratz you found maybe your first XSS Vuln! Now make or find a cookie grabber!

Q:No box came up
A:Don't worry, the site was not vuln! Just keep looking for one you will find one

Q:Where can i find a cookie grabber
A:Google is yor best friend

Q:Will there ever be a tutorial with a cookie grabber?
A:There will be it just takes me time because I do also have a life to worry about

Q:Is there any programs that will do all this for me?
A:Yes there it but it is much more fun searching for Exploits yourself


This
is the most basic tutorial for a begginer you may find. I don't go into
detail becasue many people ask questions about what it does! So to be
honest be happy with what you got and enjoy. There is a good tutorial
on XSS on milw0rm.


Links:

Code: Select all

Google Dorks:
inurl:"title="
inurl:"page="
--------------------
http://www.acunetix.com/vulnerability-scanner/
http://milw0rm.com/

i recommend people go here: http://ha.ckers.org/xss.html
for more info on XSS and xss triggers