Can you explain different types of XSS

Question

Accepted Answer

XSS stands for Cross-Site Scripting. It is a type of security vulnerability that allows attackers to inject malicious scripts into web pages.

Reflected XSS: The injected script is embedded in the URL and executed when the victim visits the manipulated link.
Stored XSS: The injected script is permanently stored on the target server and executed whenever the vulnerable page is accessed.
DOM-based XSS: The vulnerability arises from insecure JavaScript coding that allows the attacker to manipulate the Document Object Model (DOM) of a web page.
XSS via HTML attributes: The attacker injects malicious code into HTML attributes like onclick, onload, etc.
XSS via JavaScript events: The attacker exploits JavaScript event handlers like onmouseover, onfocus, etc., to execute malicious code.
XSS via input fields: The attacker injects malicious scripts into input fields that are not properly validated or sanitized.
XSS via cookies: The attacker manipulates cookies to inject malicious scripts that are executed when the victim visits the affected website.

Accepted Answer

XSS (cross site scripting) : it is kind of security.

The attackers injects some kind javascript payloads. In order to get some sensitive data.

There are 3 types of XSS they are

1.Reflected XSS

In refelcted XSS the attacker injects some kind of javascript payloads into the input feilds. They executed only once , the payloads doesn't stored in any dbs, and they only displays who they are injected only once.

2.Stored XSS

In stored XSS the attacker injects some kind of payloads in the inputs felids of application in order to get some kind os sensitive data. The injected payloads get stored in backend dbs, and they executes multiple times and they visible to all the usere who are using the application on particular tabs when they click

3.DOM based XSS

It is completely client side validation..

Can you explain different types of XSS

Top Deloitte Vapt Engineer interview questions & answers

Popular interview questions of Vapt Engineer

Top HR questions asked in Deloitte Vapt Engineer