Cross-Site Scripting (XSS) Explained And Demonstrated

Ali Issa · Beginner ·🔐 Cybersecurity ·4y ago

About this lesson

In this video we will cover the three types of Cross-Site Scripting: Reflected XSS, Stored XSS, and DOM-based XSS. We will combine theory with practice to get a thorough understanding of each type. We will use tools such as Burp Intruder to automate customized attacks, and DOM Invader to facilitate the process of finding DOM-based XSS vulnerabilities. Timestamps: 0:00 Intro 0:00:48 Reflected XSS 0:07:07 Stored XSS 0:11:46 DOM-based XSS 0:20:50 DOM Invader 0:25:42 Burp Intruder Resources used in this video: Labs: https://portswigger.net/web-security/all-labs Burp Suite: https://portswigger.net/burp Damn Vulnerable Web Application: https://dvwa.co.uk/ XSS Wiki: https://github.com/wisec/domxsswiki/wiki/ Disclaimer: This video content has been made available for informational and educational purposes only. The misuse of the information provided in this video can result in criminal charges brought against the person in question. The channel owner will not be held responsible for any misuse of the given information.

Original Description

In this video we will cover the three types of Cross-Site Scripting: Reflected XSS, Stored XSS, and DOM-based XSS. We will combine theory with practice to get a thorough understanding of each type. We will use tools such as Burp Intruder to automate customized attacks, and DOM Invader to facilitate the process of finding DOM-based XSS vulnerabilities. Timestamps: 0:00 Intro 0:00:48 Reflected XSS 0:07:07 Stored XSS 0:11:46 DOM-based XSS 0:20:50 DOM Invader 0:25:42 Burp Intruder Resources used in this video: Labs: https://portswigger.net/web-security/all-labs Burp Suite: https://portswigger.net/burp Damn Vulnerable Web Application: https://dvwa.co.uk/ XSS Wiki: https://github.com/wisec/domxsswiki/wiki/ Disclaimer: This video content has been made available for informational and educational purposes only. The misuse of the information provided in this video can result in criminal charges brought against the person in question. The channel owner will not be held responsible for any misuse of the given information.

Watch on YouTube ↗ (saves to browser)

Sign in to unlock AI tutor explanation · ⚡30

Related Reads

The Clock That Dies at Midnight: My iPod and the 2038 Bug

Learn about the 2038 bug and its potential impact on older devices like the iPod Nano

Medium · Cybersecurity

Inside Microsoft’s Record Patch Tuesday: 570 Vulnerabilities, 3 Zero-Days You Can’t Ignore

Microsoft's record Patch Tuesday addresses 570 vulnerabilities, including 3 zero-days, and why it matters for cybersecurity

Medium · Cybersecurity

HTML Injection Nedir? BWAPP ve Burp Suite ile Pratik Örnek

Learn about HTML Injection and how to practice using BWAPP and Burp Suite, essential tools for cybersecurity professionals

Medium · Cybersecurity

I set up whonix by hand once and gave the workstation a direct line to the internet without…

Learn from a mistake in Whonix setup where a workstation was accidentally given direct internet access, compromising security

Medium · Cybersecurity

Chapters (6)

Intro

0:48 Reflected XSS

7:07 Stored XSS

11:46 DOM-based XSS

20:50 DOM Invader

25:42 Burp Intruder

Best VPN For China 2026 — Which One Actually Works?