XSS Attack using

Burpsuite

ARFA SHAIKH
20BIT054
 WHAT IS AN XSS
ATTACK?

NEPTUNE

It’s ross site scripting (XSS) is an attack in which an attacker

injects malicious executable scripts into the code of a trusted
application or website. Attackers often initiate an XSS attack by
sending a malicious link to a user and enticing the user to click
it. planet
 Types of XSS Attacks
Reflected XSS
When a vulnerable web application receives scripts or data from
the user and present it back to web application response in unsafe
ways. As the word suggests Reflected, the input data or script can
reflect back to the application without a change in it.

Stored XSS
When an attacker can inject malicious script or payload in
parameter input like a comment field or review application field,
but the catch here is that this data is stored in the database of the
server, means that the script or payload gets stored in the
application and executes every time the user visits that page or tries
to access that data.

DOM XSS
Document Object Model based cross-site scripting, is a client-side
attack where the web page sends a request to the server followed by a
response from the server, here legitimate server script is executed
first followed by the malicious script. In this attack, the payload can
be bound with query strings of the URL so whenever the URL will be
opened it will execute and all user data and session can be accessible
to the attacker.
 Analyzing Previous XSS Attack Cases
Targeted Type of Brief Description Vulnerabilities Protocols
Website XSS attack to prevent
attack
MySpace Stored XSS Worm exploited a flaw in MySpace’s Located within OS of HTTPS,
(2005) Worm filter, which allowed hacker to inject code the server, HTTP, and WAF
into a user’s profile. web application
PayPal Stored XSS Vulnerability located in PayPal allowed Outdated Web HTTPS,
(2006) attack an attacker to steal confidential Application Server WAF
information from users.
Orkut XSS worm Self-propagating worm affected users by Vulnerable Web HTTPS,
(2010) spreading malicious code to each profile Server, Use of HTTP WAF
who viewed the affected profile.
Amazon Stored XSS Vulnerability allowed hackers to steal Vulnerable Web HTTPS,
(2013) attack cookies, and user credentials. Server, Outdated WAF WAF

Twitter Stored XSS An XSS attack on Twitter caused users Within the web server, HTTPS,
(2014) attack to post things without their permission. Outdated Web server, WAF
No SSL Certificate
 Preventing XSS attacks

01 02 03 04

ESCAPING INPUT SANITIZING WHITELISTI

INPUT VALIDATION INPUT NG VALUES
 Escaping Input:
• Escaping input, is the concept of ensuring the data
an application has received is secure (i.e., cannot
be inadvertently interpreted as code) before
rendering it for further processing.

• This technique also is used to encode special

characters. As shown in Table, escaping changes
specific characters that might otherwise be
deciphered as harmful code by prefixing or
replacing them with other characters.

• This helps control the information that goes to the

webpage, which in turn reduces the chance of XSS
attacks.
 Cybersecurity Infographics

MERCURY MARS
Mercury is the Mars is actually a
smallest planet cold place

VENUS NEPTUNE
Venus has a It’s the farthest
beautiful name planet

JUPITER SATURN
Jupiter is the Yes, Saturn is the
biggest planet ringed one
 Cybersecurity Infographics

MERCURY VENUS MARS

It’s a very small Venus has a Mars is a cold
planet beautiful name place

JUPITER NEPTUNE SATURN

Jupiter is the It’s the farthest Yes, Saturn is
biggest planet planet the ringed one
 Cybersecurity Infographics

MERCURY MARS
Mercury is the Mars is actually a
smallest planet cold place

VENUS NEPTUNE
Venus has a It’s the farthest
beautiful name planet

JUPITER SATURN
Jupiter is the biggest Yes, Saturn is the
planet ringed one
 Cybersecurity Infographics

MERCURY MARS
Mercury is the Mars is actually a
smallest planet cold place

JUPITER SATURN
Jupiter is the Yes, Saturn is the
biggest planet ringed one
 Cybersecurity Infographics

MERCURY MARS JUPITER VENUS SATURN

It's the closest Despite being It's a gas giant Venus is the
Yes, Saturn is
planet to the red, Mars is a and the biggest second planet to
the ringed one
Sun cold place planet the Sun
Cybersecurity Infographics

MERCUR Mercury is the closest planet

Y to the Sun

Neptune is the farthest planet

NEPTUNE from the Sun

Despite being red, Mars is

MARS actually a cold place

Venus has a beautiful name,

VENUS but it’s very hot
 Cybersecurity Infographics

MERCURY MARS
Mercury is the Mars is actually a
smallest planet cold place

JUPITER SATURN
Jupiter is the Yes, Saturn is the
biggest planet ringed one
Cybersecurity Infographics

MERCUR Mercury is the smallest

Y and innermost planet

It’s the farthest

planet from the Sun
NEPTUNE

Despite being red, Mars is

MARS a very cold place

Venus is the second

planet from the Sun
VENUS
 Cybersecurity Infographics

MERCURY VENUS MARS

It’s a very small Venus has a Mars is a cold
planet beautiful name place

JUPITER NEPTUNE SATURN

Jupiter is the It’s the farthest Yes, Saturn is
biggest planet planet the ringed one
 Cybersecurity Infographics

MERCURY MARS
Mercury is the Mars is actually a
smallest planet cold place

VENUS NEPTUNE
Venus has a It’s the farthest
beautiful name planet

JUPITER SATURN
Jupiter is the biggest Yes, Saturn is the
planet ringed one
 Cybersecurity Infographics

MERCURY MARS
Mercury is the Mars is actually a
smallest planet cold place

VENUS NEPTUNE
Venus has a It’s the farthest
beautiful name planet

JUPITER SATURN
Jupiter is the biggest Yes, Saturn is the
planet ringed one
 Cybersecurity Infographics

MERCURY MARS JUPITER VENUS

Despite being It's a gas giant Venus is the

It's the closest
red, Mars is a and the biggest second planet to
planet to the Sun
cold place planet the Sun
 Cybersecurity Infographics

MERCURY
Mercury is the
smallest planet

VENUS NEPTUNE
It’s the farthest
Venus has a
planet
beautiful name

JUPITER SATURN
Jupiter is the biggest Yes, Saturn is the
planet ringed one
 Cybersecurity Infographics

MERCURY MARS JUPITER VENUS

Despite being red, Venus is the

It's the closest It's a gas giant and
Mars is a cold second planet to
planet to the Sun the biggest planet
place the Sun
 Cybersecurity Infographics

MERCURY MARS
Mercury is the Mars is actually a
smallest planet cold place

VENUS NEPTUNE
Venus has a It’s the farthest
beautiful name planet

JUPITER SATURN
Jupiter is the biggest Yes, Saturn is the
planet ringed one
 Cybersecurity Infographics

Mercury is the smallest Neptune is the farthest

planet of them all planet from the Sun

JUPITER VENUS

MERCUR
NEPTUNE
Jupiter is the fifth planet
Y Venus is the second
from the Sun and the planet from the Sun. It
largest has a beautiful name
 Cybersecurity Infographics

MERCURY MARS
Mercury is the Mars is actually a
smallest planet cold place

VENUS NEPTUNE
Venus has a It’s the farthest
beautiful name planet

JUPITER SATURN
Jupiter is the biggest Yes, Saturn is the
planet ringed one
Cybersecurity Infographics

JUPITER
Jupiter is the fifth planet from
the Sun

NEPTUNE
Neptune is the farthest planet
from the Sun

SATURN
Mercury is the smallest planet
of them all
 Cybersecurity Infographics
EARTH

MERCURY VENUS MARS

Mercury is the Venus has a Mars is a cold
closest planet beautiful name place

JUPITER NEPTUNE SATURN

Jupiter is the It’s the farthest Yes, Saturn is
biggest planet planet the ringed one
Cybersecurity Infographics
Cross-site scripting is commonly known as
XSS which is a web-based security
vulnerability that allows an attacker to
interfere between vulnerable web application
and user.

1 Jupiter is a gas giant and actually also the biggest

planet in the Solar System

2 Saturn is a gas giant in the Solar System,

composed mostly of hydrogen and helium

3 Venus has a beautiful name and is the second

planet from the Sun
 Cybersecurity Infographics

EARTH NEPTUNE MARS MERCURY

Earth is the third It’s the farthest Despite being Mercury is the
planet from the planet from the red, Mars is a closest object to
Sun Sun cold place the Sun
 Cybersecurity Infographics

Venus is the
second planet
from the Sun

Venus is the Neptune is

second planet the farthest
from the Sun known planet

Jupiter is the Mercury is the

fifth planet from smallest planet
the Sun
 Cybersecurity Infographics

NEPTUNE MARS JUPITER

Neptune is the Despite being Jupiter is a gas
farthest planet red, Mars is a giant and the
from the Sun cold place biggest planet

EARTH SATURN MERCURY

Earth is the third It’s composed of Mercury is the
planet from the hydrogen and closest object to
Sun helium the Sun
 Cybersecurity Infographics

EARTH NEPTUNE MARS MERCURY

Earth is the third It’s the farthest Despite being red, Mercury is the
planet from the planet from the Mars is a cold closest object to
Sun Sun place the Sun
 Cybersecurity Infographics

MERCURY MARS
Mercury is the Mars is actually a
smallest planet cold place

VENUS NEPTUNE
Venus has a It’s the farthest
beautiful name planet

EARTH
JUPITER SATURN
Jupiter is the biggest Is the third planet Yes, Saturn is the
planet from the Sun ringed one