Xss©ʲô
XSSǵЩXSSҶǿóЩʲôģĶ©ҾһЩֲXSS©alertһΪXSSˣԼalert˵Լ©
ʵԶûô㷢ֵֻdzԱһСbugѣԶ̸XSSǵĹϵͬϵͳ©©õĹϵͬնϵͳǷֹ****ڴ治Ϊread?Ƿ֪©һֱ?exploitԶô飬˵Լ©ô?ôxss©ʲô?Ӧм㣺
1Թ
վһϷվվǹqqtaobaoӰ൱վȣDZƽҪȡʺ;ȻҲվ൱ߣܽҳȥ
ƽƽһСվXSS©ҪôĪֱӰľҳַȥ
2ûȨ²
վлԱˣЩԱкܶIJҪڲϣǿͨXSSѵ¼߽ȨΪcookiesĵȡӦһΪĿҲǻȡûȨ()ӶȡûijЩϢ߽Ȩµز
3Dosܻ
ͬҪһdzվ㣬СվĪԼȡϢǿͨҳķûϵعվ㣬߽оɨȵȡjsѾjs˿ɨ衢jiktoxssshellȵȡ
4Ȩ
һҪ̳Ϣϵͳ֮һҪйԱˡҪ߶Ŀϵͳ൱Ϥ(һϵͳҪԴ)Ӷ֪Ȩ
5ʵЧ
ƩڰٶȿռIJƵ;ƩһЩ˲ͻУʵֵЧȵȡ
ۣ
ӶӦ˽ЩվӦþеʣ
ߵķлԱйԱомֵʺ룬Чʵ֡
Ajax Hacking with XSSӦ֪XSSٰinput XSStextarea XSSַʽ
url XSSinput XSSЩ©ڱʽXSStextarea XSSһڲXSS
ζһҳDzᴥʽXSSģǴվе©ֳʽXSS©
Եȡһinput XSSalertһС˴ޣ㷢һ©alertһʵʲôˡʹܹЩСľҲǺû顪ΪĪֱԼXSSҳ淢ˡ
sqlע벻ͬXSSϾǿͻ˵ĶsqlעĿΪ˵õĿϵͳȨޣsql䱾ִеľǷ˵ָ;XSSһȴΪ˻ÿͻ˵ĶִеҲǿͻ˵ָ
ҳ:
[1]