So I lie just a little bit.
I actually want to cover reflected cross site scripting first because it's going to be a tad easier
here.
So I want to first cover the scoreboard and then I want to cover the methodology and then we'll talk
about the actual reflected cross-eyed scripting which again in Docker it's not going to allow us to
perform.
That's OK.
I got you covered.
I'll show you an example of it elsewhere.
So here if we go in to our scoreboard let's take a look at the scoreboard really quick and we sort down
here by cross-eyed scripting only.
We have all of our options.
Now we're going to be covering reflected and we're going to be covering the story.
OK.
So there's classic stored and reflected.
You're welcome to go through the rest of these read the write up see what's going on.
The one I do want you to focus on for the scope of this course is I want you to focus on the DOM cross
and scripting.
Guess what.
There's an interactive tutorial for this.
That's great.
It's going to teach you how to do this.
Step by step and I think it's perfect.
So the nice thing here is they give you the payload or at least the payload on how they want you to
start.
So you can copy this payload in try to use that around the Web site and see what's going on.
I'm going to go ahead and copy this.
Now what I would do if I were a pen testing this Web site I would come through here and I would expect
anything and everything that had an input or a parameter.
And this is a good place for brb sweet as well.
Burps it's pretty good at actually finding reflective cross site scripting.
So again that crawling aspect in the active scanning aspect is really nice because it might pick up
some of these.
But what I'm after is something like for example this banana juice and I want to look at the reviews
for it.
OK well look there's a review box here.
What if I tried.
Just you know no placing this in here and submitting it well OK it's in here but nothing's happening
with close allies try to open up again.
Still nothing.
And you know this is a good example of stored.
So in terms of storage right this is happening on the server.
This is now stored on the server but it's not executing anything for us.
That's that's fine.
OK well it doesn't work there.
Maybe a search bar you know maybe I'll come up here and I'll paste it hit enter and maybe something
will work.
What do you know that worked.
That's a dom based cross site scripting don't do anything.
Go read the walkthrough followed along again.
But look at that.
That was that easy right.
You can find it that easy so you can come through and maybe you know there's a complaint form the about
us photo wall.
There's different things what about in your account when you go to testing and you say Oh look I've
got a user name here or I've got a U url or something here that I can put maybe you want to set a username
use a set username.
MAN Look they they took out are part of our code.
We had the I famous I see but they they removed part of it.
So it looks like they're filtering stuff here and we'll talk about that later.
But the point that I'm getting at here is you want to attempt to attack any parameter that you can.
OK so you want to click around.
If there's a field you could insert something into like this.
That's a good one.
If you come up here you see something like this.
That's a spot.
Maybe you want to try it or again if you see like remember the reflected example where you saw a question
mark equals you might want to try that too where you just entered the eye frame and see if you can get
it to work.
So there's lots of different places here that we can try this.
Now what we're going to do is we're going to take a look at something called cross site scripting game
and what it's going to do is just allow us to practice.
So if you go out to the Web and I'm just gonna open up a new tab and I will submit this again for you
guys.
This is the address access s dash game app spot dot com and go ahead and hit enter.
And if for some reason this does not work any longer than just understand that how this is working what
we're testing for and why it happens is just as important as actually getting it to execute on your
side.
So unfortunately again we can't execute on Docker for this specific vulnerability with cross-eyed scripting
says application itself is kind of weird in the sense that it allows us to have some.
And depending on the different type or running it.
So here cross site scripting and it says level 1 Hello World of cross-eyed scripting.
So let's go ahead and just get a pop up on here.
Again it's a search bar.
Right.
And we're just going to talk about an example we'll say script alert 1 or alert.
One like this and we'll just say slash script and we'll give it a go and I'm going to copy that and
hit search and look at that.
They went ahead and search for us and it gave that pop up and we have that question mark.
Query equals here and you see now that we've got this pop up and that's really like what a reflective
would look like.
OK.
You would see reflected here and it's going to reflect and it's not stored anywhere.
So if we left and came back to the page guess what.
It's not going to be there.
And if we try here maybe this is looking like a storm because this is a comment post right.
We come in here and obfuscated it well maybe we're not good enough here to figure out quite yet.
This could be a game that you can definitely come through and play and see what's happening and let's
go again.
Maybe this is had something for us but it didn't.
So this is just an idea here you can play at these games see what it looks like.
But all we're after is that pop up and you got to see what that looks like.
Now in the next one it's going to be a little bit more fun and a little bit more engaging because we
actually get to mess around with not only a store cross-eyed scripting but a store across cross-eyed
scripting that we have to think about to actually figure out.
So I'll meet you over the next video and we start talking about store across a scripting.
We do a little bit of bypassing so I'll see you over there.