PentesterLab XSS Solutions and How to Use Beef

Cross-site Scripting (XSS) is a client-side code injection attack. There 3 types of XSS. 1-Reflected XSS 2-Stored XSS 3- DOM XSS We can execute malicious javascript code which is stealing cookie or redirecting victim anywhere. Example1 In Example1, the first thing I tried is injecting <a> tag. I saw that the input is directly printed. […]

PentesterLab Command Injections

Hello, in this article I’m gonna show you command injection vulnerability. I’ll be using PentesterLab for this. You can download it here. Let’s get started. So what is the command injection? According to Owasp : Command injection is an attack in which the goal is execution of arbitrary commands on the host operating system via […]