Member-only story
XSS Introduction Walkthrough Notes | TryHackMe
3 min read2 days ago
Room: https://tryhackme.com/room/xssintroduction
Press enter or click to view image in full size
We explore how XSS works, learning how input fields can run scripts, steal data, and affect users, showing how different types behave and why proper filtering is important.
Task 2: Important Terminologies
What is the URL parameter in the URL http://google.com/text=?
text
Which is the most renowned scripting language for adding interactivity to the DOM?
JavaScript
Task 3: XSS Payloads
Which document property could contain the user’s session token?
document.cookie
Which JavaScript method is often used as a Proof of Concept?
alert
Task 4: Reflected XSS — Non-Persistent
What is the text shown in the alert pop-up after a successful XSS attack?
Hack
Solution:
