Emmanuel Nwaegunwamaxzeno.hashnode.net·Dec 28, 2022Maximizing Security in Your Django Web App: Advanced Best PracticesDjango is a powerful web framework that is widely used for building web applications. It provides a lot of security features out of the box, such as CSRF protection, cross-site scripting (XSS) protection, and secure password hashing. However, as a de...Discuss·9 likes·64 readsDjango
Abubakar Sadiq Sirajo dulah.hashnode.net·Jun 3, 2022How to perform XSS attacksTo put simply, XSS is just tricking the browser into executing javascript code by providing malicious user input. Take this for example: <div> <h1> Welcome {your input} </h1> </div> This webpage is expecting you to provide your name using some in...Discuss·7 likes·350 readsTesting
Veshraj GhimireforInfos3c Blogsinfos3c.hashnode.net·Nov 23, 2022Interesting Stored XSS via meta dataBack in February of this year, Bibek Neupane and I had hacked on a private bug bounty program on Hackerone, we had chosen one of the social platform as our target. This post will detail how we discovered Stored Cross-Site Scripting via meta data on o...Discuss·5 likes·335 readsXSS
Aditya Pandeyadityapandey.hashnode.net·Apr 6, 2023Cross-Site Scripting (XSS) on Web ApplicationsCross-site scripting (XSS) is a type of security vulnerability that allows an attacker to inject malicious code into a website or web application, potentially compromising its users. XSS attacks are one of the most common types of security vulnerabil...DiscussXSS
The Chief - Omarchiefomar.hashnode.net·Mar 23, 2023A-Cross Site Script-in-jections tooBismillah What an eventful day, the second day of Jr. Pentesting was all reading and a bit of practice. This first week I'm just learning, then next week I'll continue with my Portswigger practice, might even hit some Hackerone CTFs and Owasp Juice S...DiscussXSS
Joel Ndohforndohjoel.hashnode.net·Mar 19, 2023How To Prevent HPP and XSS Attacks In NodejsIn today's world, cyber attacks are becoming more and more sophisticated. Two common types of attacks that websites and applications face are: HPP (HTTP Parameter Pollution) XSS (Cross-Site Scripting). HPP HPP attacks occur when the HTTP paramete...DiscussNode.js
shafouzshafouz.hashnode.net·Mar 16, 2023hxp 2022 - archivedarchived chall: archived by sandr0 difficulty: easy description: I’m using this super secure big company open source software, what could go wrong? Two credentials are provided, admin and regular user. The challenge consists of a server and an a...Discuss·139 readsWrite Up
Tonytawn33y.hashnode.net·Feb 16, 2023Here’s a reason why your website is not secureOriginally published on Dev.to. If you are a website developer, you have most probably protected yourself from common attacks such as XSS, SQL, CSRF, etc. But are you safe from a Clickjacking attack? Try this: Create a blank HTML file. Add the foll...Discuss·30 readsSecurity
Anthony Smithanthonysmith.hashnode.net·Feb 14, 2023Writing Secure Code With JavaScriptWhen writing code with JavaScript, one of the most important things a developer can do is make sure their code is secure. To achieve this, there are a number of best practices, code examples and tools that developers should include in their projects....Discuss·1 like·57 readsJavaScriptJavaScript
D Ʌ V I D ★ S Ξ N Ʌ T Ξdavidsenate.hashnode.net·Jan 31, 2023Strong Cross-Site Request Forgery Prevention (CSRF) for PHP and jQueryA few days ago, we have recently noticed some strange access to one of our customer portals, some kind of direct external access to a specific account, nothing dangerous for customers' data, but just annoying, we never like direct access especially w...Discuss·1 like·119 readsDevPHP
Dhawal Pandyadhawalpandya01.hashnode.net·Jan 16, 2023Attack of the XSSIt is an older problem, but we must know it because we are the effect of our causes. and our causes lie in history. And so studying history is merely studying the self. Today we have XSS to learn. Cross-Site Scripting (XSS) is a type of cyber attack ...Discuss·51 readsXSS
Sergio Medeirosgrumpz.hashnode.net·Jan 10, 20234 Basic Steps for Finding XSS VulnerabilitiesCross-Site Scripting (XSS) is a common and dangerous vulnerability that allows an attacker to inject malicious code into a website or web application. In this blog post, we will discuss how to find and exploit XSS vulnerabilities "in the wild," or in...Discuss·104 readsBug Hunting for Total BeginnersXSS
Emmanuel Nwaegunwamaxzeno.hashnode.net·Dec 28, 2022Maximizing Security in Your Django Web App: Advanced Best PracticesDjango is a powerful web framework that is widely used for building web applications. It provides a lot of security features out of the box, such as CSRF protection, cross-site scripting (XSS) protection, and secure password hashing. However, as a de...Discuss·9 likes·64 readsDjango
