UDEMY_CROSS_SITE_SCRIPTING_XSS_ATTACKS_FOR_PENTESTERS_TUTORIAL-kEISO

Section

Appz

Group

kEISO

Size

162,71 MB

Files

6

Date

2015-06-29

NFO

                                                   █▀▀▀▀
                                                   ▓ ████████ ░
                                                   ░ ████████ ▓
                                           █▀▀▀      ████████ ▀▀▀▀  ▀▀▓
                                           ▓ ███████████▓████████████ ▒
            ████████ ▄                     ░ ██████████▓▒▓███████████ ░
            ████████ █▓▄              ▄▓█▄▄  ████████▓▀ ░ ▀▀▀▓███████
 ████████▌▄ ████████ ▀▀▀▀           ▄▓███████ ░ ▄▄▄▄ ▄█▄ ▄██▄ ▓▄▄ ▄   ████████
 ▀▀▀█████▌█ ██████████████▄       ▄▓███████▀▄▄     ▓▐████████ ░       ████████
  ███████▌█ █████████████▌█▓▄   ▄▓█████████████▓▄▄ ░ ▀█████▀ ▐▄▄█████▌████████
  ███████▌ ▄████████▓████▌█▀▀▀    ▀▀████████████████▄█▄▀█▀ ▄▌░███████▌████████
███████▓▀▄████████▓▀▄████ █ ████████▄▄█▀████████████████ ▄██▌▓████████████████
▓█████▄█████████▀ ▓██████ ▀ █████▄ ▐██████▌▀▓████████▓██████▌▀██████████▀▀▀▀▀▀
  ▀▀▓████████▓▀   ████████▄ ███████▐██████▌   ▀██████▀███████ ▄▀██▓████▄ ▀██▀
  ▐▄▄ ▀▀▓███████▄▄█▀▀▓██████▄▄▐▀▓██▐███████  ▄████▓▀  ███████ ▓  ▀░██████▄▀
  ▐███░▄▄ ▐████████ ░░ ▀▀▓█████████ ███████▄██▓██▀    ▀▀█████ ░    ▀▀▓████░▄
▄▄▄▄▄█▓██ ▐████████▄▄▄▄▄▄▄ ▀▀██████ ▀▀█▀███▀▀███▄  ▄▐████████▌▄▄▄░████████▓██
▐████████ ▓███████▓██████▓  ██▄▓███████████▌██████▄▀ ████████▌███▒████▀▀▀
 ████████ ▓█████▄▄ ▄▄████▌  █████▐█████████▌████████▄████████▓███▓████  ███████
 ███▀▀▀▀▀▐███  ███ ██████████████ █████████▌ ▀██▓█████▀▀▀    ▐███████▌  ███████
  ▄▄████ ▐█      █▄▄▄▄▄▄ ▀▀▀▀▀▓██ ███▌▀▀▀ ▄▄█▄ ▀░███████▄ ▄██████████▓███████▀▀
   ▀▓▀▀▀ ▐███░ ███████▌▐▀█████▄▄▄▄▀▄▄▄██▀ ▀▓███▄ ▀███████████▌▐█▄▄▀▀▀▀▀▀▀█████
         ▓███  ███████▌██▄▀▀▀▀▓████▄▀▓██ ▓  ▀▓███▄ ▀▀████████▌▓█████████▄▄▄▄▄
         ▀▀▀▀▀▀▀▀▀▐ ██ ███          ▀▀  ▓█▓   ▀▀▀  ▄██████████     ▀▀▀▀▓███▀
          ▀▓█▀▀▀▀▀▀▀▀▀▀███       ░░ ▀▀█▓█████▀▀▄▄▓▄▄ ▀▀███████ ▓▄▄
            ▀ ████████ ▀▀▀    ▄▄▄▓▓▌  ▄██▀██▄    ▀▀▓██▄  ▀▀███ ████▓▄
           ▄▄▄████████▄▄▄▄▓▓█████▀▀  ▐▓▀ █▄▀▓█       ▀ ▄██▄▄ ▀ ▀█▀███▌
  ░▄▄▄▄██████▀██████▓██████████████  ▀ ▄████▄██▄▄▄▓██ ██████▀   ▄█████ ███▄▄▄▄▄
██▓█████▓███████████░▓█████████████ ▐████████████████░█████▌  ▄▓██▀███▌████████
▓███████░██████████████████  █▓▓▀▀▀ ▐██████▓███▌█████▓█████ ▄███▀▐████▌███████▌
░▓█████▀ ███▀▀▀█████▌▀▓█████▄   ▄▓█ ▐██████▒███████▀▀▀▐██████▓▀  ▐████▌█████▄
 ▀██████▄   ▄▓▐██████▄ ▀▓██████ █▀▀ ███████░▀███████▄ ░█████▀▄  ▄████▓███████▌
   ▀▓██████ ▀▀▐█████▓▓ ▄▄██████   ▄ ███████▄▐▄▀██████▓▓▄███▄█████████░███████▌
   ▄▄██████   ▄█████████████▌   ███▄▄███████    ▀▓███ ▄▄▄▄▄▄▄▄ ▀▀██▓▀ ███████
░███████▌   █████▐███████████  ▐████████████████   ▐█ █████████▓▄▄   ▐███████
 ▌▄▄█████  ▐█████▐█████▐██████▄█████▄███████▀███▌  ██ ▀▀░▓█████████▓▄▐███████
  ▐███████▄█████▌▐█████ ▀█████████ █▀███████▓████▄██████▓████████████████████
   ▀▓█████████▓▀▄██████ █▄▄▀▀██▓▀▀  ▓▄▀█████▀▓████████▐███████▀▓█████▀▀▀████▌
      ▀▀▓░░▀▀▄▄███████  ▀ ▄▄▄▄█████ ▄▀█▄▀███▐▄ ▀▀░░▓▀▀▐███████ ▄▄▀▀   ░▄  ▀█▌
     ▄▀ ▄ ▀▄   ████████████████▓███ ██ ▓█▄▄█ ▀██▄▄▄██▀▄▄▄▄▄▄▄▄ ██▀ ▄▀ ▄ ▀▄  ▌
    ▐▌ ■░■ ▐▌  ████████████████████ ███ ▀▓██   ▀▀▓▀▀▄██████▓▀   ▀ ▐▌ ■░■ ▐▌
     ▀▄ ■ ▄▀   ███████▓▓▀▀▀▀▀▓▓▄▄▄▄       ▀▓       ▀▀▀▀▀▀▀▀        ▀▄ ■ ▄▀
  ▄ ▀ ▐ ▓ ▌ ▀ ▄  ▄▄▄▄▄███████████▀ ▄■▀▀▀▀▀■▄                    ▄ ▀ ▐ ▓ ▌ ▀ ▄
 ■    ▐ ▒ ▌    ■  ▀████▓▓▓░░░▀▀▀ ▄▀  KYRIE  ▀▄                 ■ ▄  ▐ ▒ ▌    ■
▌   ▄▀▐ ░ ▌▀▄   ▐   ▀▀    ▄▄▄▄▄▄▄▌  ELEISON  ▐▄▄▄▄▄▄▄░        ▌  ▀▄▀▐ ░ ▌▀▄   ▐
▀▄ ▄▄▓▐ ░ ▌▓▄▄ ▄▀▀▀▄ ▄▄▓▀▀▀ ▄ ▄ ▄▀▄ ▄▄▀▀▀▄▄ ▄▀▄ ▄ ▄ ▀▀▀▓▄▄ ▄▀▀▀▄ ▀▄▓▐ ░ ▌▓▄▄ ▄▀
  ▐▀▀▀▀▄▀▄▀▀▀▀▐ ▓▀ ▐▌  ▄  ▀  ▄▄▄▄▄▄█▀░   ░▀█▄▄▄▄▄▄  ▀  ▄  ▐▌ ▀▓ ▌ ▀▀▀▄▀▄▀▀▀▀▌
▄  ▀▀▀▓ ▀  ▀▀▀ ▀▄▄▄▀  ▓██ █▓▀▀     ▀▌▄   ▄▐▀     ▀▀▓█ ██▓  ▀▄▄▄▀ ▐▀▀  ▀ ▓▀▀▀  ▄
█▄   ▀▐  ▄██▄   ▄  ▄▄█▀              ▀▀▀▀▀              ▀█▄▄  ▄  ▄▄██▄  ▌▀   ▄█
▓█▓▄    █▄▀▀█▌ ▄ ▄█▓▀                                     ▀▓█▄ ▄ ▀█▀▀▄█    ▄▓█▓
 ▀▓█▓▄▄▓████▄▄▄██▀▀           RELEASE INFORMATION           ▀▀██▄ ▄████▓▄▄▓█▓▀
  ▀▓████▀▓█▀ ▀▓▀                                               ▀▓  ▀█▓▀████▓▀
 █ ▀█▓▓██▄▄██    TITLE: Cross Site Scripting (XSS) Attacks for    ██▄▄██▓▓█▀ █
 █▀ ▐█▒▓██░██            Pentesters                               ██░██▓▒█▌ ▀█
 █▀  █▓███▒█▌                                                     ▐█▒███▓█  ▀█
 █▀ ▐█▓███▓█░                                                     ░█▓███▓█▌ ▀█
 █▀ ▐██████▌     PUBLISHER..........: UDEMY                        ▐██████▌ ▀█
 █▀ ▀▀████▓      LINK...............: http://is.gd/73OW9I           ▓████▀▀ ▀█
 ▌ ▓██▌▄ ▀▀      AUTHOR.............: Ajin Abraham                  ▀▀ ▄▐██▓ ▐
 ▌▐███░▒███▌     LEVEL..............: all level                    ▐███▒░███▌▐
 ▌ ████▓████     RUNTIME............: 1.5 hours                    ████▓████ ▐
 █ ▐▓█▀█████░    LANGUAGE...........: ENGLISH                     ░█████▀█▓▌ █
 █▀ ▀▄█▄▄▀▀█▓    RELEASE TYPE.......: RETAIL                      ▓█▀▀▄▄█▄▀ ▀█
 █▀▄ ▄▀███▓▄     RELEASE FORMAT.....: ISO                          ▄▓███▀▄ ▄▀█
 █▀█ ▐▓▄▀████    STORE DATE:........: 2015.01.12                  ████▀▄▓▌ █▀█
 █▀█ ▐█▌▓██▓     RELEASE DATE.......: 2015.06.29                   ▓██▓▐█▌ █▀█
 ▓▀█ ▓▌░██▓      ISO SIZE...........: 170,596,352                   ▓██░▐▓ █▀▓
 ▒▀█ █ ▓█▓       ISO CHECKSUM.......: AF9B409D                       ▓█▓ █ █▀▒
 ░ █ ▌░██        DISKCOUNT..........: 4 * 50MB                        ██░▐ █ ░
   ▓█▌▓█▌        SAVED MONEY........: YOU DID!                          ▐█▓▐█▓
 ░ ▒█▐██         DISKNAME...........: keiso_ucssxssap                  ██▌█▒ ░
   ░▀ ▀                                                                   ▀ ▀░
 ░                                                                           ░
 ░▄░ ░       ██           ▄▄▄▄▄▓█▀█▀ ▀ ░ ▀ ▀█▀█▓▄▄▄▄▄           ██       ░ ░▄░
 ▒▄▒ ▓░   ████████  ▄▄▓█▌▀▀█▄▄▀▀               ▀▀▄▄█▀▀▐█▓▄▄  ████████   ░▓ ▒▄▒
▌▓▄▓▀ ▀▀▄    ██  ▄▄▐██▀ ▄██▀                       ▀██▄ ▀██▌▄▄  ██    ▄▀▀ ▀▓▄▓▐
█▀  ▓░  ▄ █▄▌██ ▄ ▀ ▀█▌▐▓▀         TUTORIAL          ▀▓▌▐█▀ ▀ ▄ ██▐▄█ ▄  ░▓  ▀█
 ▄▀ ▄ ▀▄   ▀▌▓█   ▀▄▄ ▀ ▀▄                           ▄▀ ▀ ▄▄▀   █▓▐▀   ▄▀ ▄ ▀▄
▐▌ ■░■ ▐▌  ▄▌░▓   ▄██   ▀  ▓                       ▓  ▀   ██▄   ▓░▐▄  ▐▌ ■░■ ▐▌
 ▀▄ ■ ▄▀ ▀▀▀▀ ▄▄█▀▀▀           ▀      ▀ ▀      ▀           ▀▀▀█▄▄ ▀▀▀▀ ▀▄ ■ ▄▀
 █▀█ ▄▓  ▄ █▀▀                                                   ▀▀█ ▄  ▓▄ █▀█
 █▀█ ▄▓  ▄ ▐▌                                                     ▐▌ ▄  ▓▄ █▀█
 █▀█ █▓ ▄▓▄▀ Cross Site Scripting or XSS is still one of the most  ▀▄▓▄ ▓█ █▀█
 █▀█ ▓▒  ▒  common injection vulnerability that exist in             ▒  ▒▓ █▀█
 █▀█ ▒░  ░  modern as well as legacy Web Applications. This          ░  ░▒ █▀█
 ▓▀█ ▒░  course will teach XSS in-depth and even talk about             ░▒ █▀▓
 ▒▀█ ░▓  the lesser known derivatives of XSS called Mutation            ▓░ █▀▒
 ░ █  ▒  XSS (mXSS) and Relative Path Overwrite XSS (RPO                ▒  █ ░
   ▓  ░  XSS). If you are interested in learning about the              ░  ▓
 ░ ▒  ░  different types of XSS, different context in XSS, and about    ░  ▒ ░
   ░  real world red team XSS Exploitation, then this course is for you ░
   ░  and it does not take hours. Invest just 2 hours and master XSS    ░
   ░  in-depth.                                                         ░
   ░                                                                    ░
   ░ This course is completely hands-on and every concept is explained  ░
   ░  with a demo or exercise. This allow students to try out all       ░
   ░  the things that they have learned. This course explains XSS, its  ░
   ░  types, context and also discuss about exploiting                  ░
   ░  XSS vulnerabilities in real world where you can                   ░
   ░  perform offensive attacks ranging from Keylogging,                ░
   ░  Cookie Stealing, Phishing, Victim/Browser/Network                 ░
   ░  Fingerprinting to much advanced attacks like                      ░
   ░  reverse TCP shell, Driveby Attacks etc with OWASP                 ░
   ░  Xenotix XSS Exploit Framework.                                    ░
   ░                                                                    ░
   ░ OWASP Xenotix XSS Exploit Framework is an Advanced Cross Site      ░
   ░  Scripting Vulnerability Detection and Exploitation Framework      ░
   ░  written by the author of this course. Finally we will also        ░
   ░  discuss about XSS Protection where we discuss about Input         ░
   ░  Validation, Context Sensitive output escaping and the various     ░
   ░  security headers that help us to mitigate XSS. Also as a take     ░
   ░  away you will get "The Ultimate XSS Protection Cheat sheet"       ░
   ░  from OpenSecurity.                                                ░
   ░                                                                    ░
   ░ The course will cover the following things.                        ░
   ░                                                                    ░
   ░ * What is XSS?                                                     ░
   ░ * Why XSS?                                                         ░
   ░ * Types of XSS                                                     ░
   ░ + Reflected XSS or Non-Persistent XSS                              ░
   ░ + Stored XSS or Persistent XSS                                     ░
   ░ + DOM XSS                                                          ░
   ░ o mXSS or Mutation XSS                                             ░
   ░ + RPO or Relative Path Overwrite XSS                               ░
   ░ * What are the Source of XSS?                                      ░
   ░ * Different Contexts in XSS                                        ░
   ░ + HTML Context                                                     ░
   ░ + Attribute Context                                                ░
   ░ + URL Context                                                      ░
   ░ + Style Context                                                    ░
   ░ + Script Context                                                   ░
   ░ * Attacks in Real World                                            ░
   ░ * Exploiting XSS with OWASP Xenotix XSS Exploit                    ░
   ░  Framework                                                         ░
   ░ * XSS Protection                                                   ░
   ░                                                                    ░
 ░                                                                           ░
 ░▄░ ░       ██           ▄▄▄▄▄▓█▀█▀ ▀ ░ ▀ ▀█▀█▓▄▄▄▄▄           ██       ░ ░▄░
 ▒▄▒ ▓░   ████████  ▄▄▓█▌▀▀█▄▄▀▀               ▀▀▄▄█▀▀▐█▓▄▄  ████████   ░▓ ▒▄▒
▌▓▄▓▀ ▀▀▄    ██  ▄▄▐██▀ ▄██▀                       ▀██▄ ▀██▌▄▄  ██    ▄▀▀ ▀▓▄▓▐
█▀  ▓░  ▄ █▄▌██ ▄ ▀ ▀█▌▐▓▀       NOTES / NEWS        ▀▓▌▐█▀ ▀ ▄ ██▐▄█ ▄  ░▓  ▀█
 ▄▀ ▄ ▀▄   ▀▌▓█   ▀▄▄ ▀ ▀▄                           ▄▀ ▀ ▄▄▀   █▓▐▀   ▄▀ ▄ ▀▄
▐▌ ■░■ ▐▌  ▄▌░▓   ▄██   ▀  ▓                       ▓  ▀   ██▄   ▓░▐▄  ▐▌ ■░■ ▐▌
 ▀▄ ■ ▄▀ ▀▀▀▀ ▄▄█▀▀▀           ▀      ▀ ▀      ▀           ▀▀▀█▄▄ ▀▀▀▀ ▀▄ ■ ▄▀
 █▀█ ▄▓  ▄ █▀▀                                                   ▀▀█ ▄  ▓▄ █▀█
 █▀█ ▄▓  ▄ ▐▌                                                     ▐▌ ▄  ▓▄ █▀█
 █▀█ █▓ ▄▓▄▀                                                       ▀▄▓▄ ▓█ █▀█
 █▀█ ▓▒  ▒               Huh? No news are good news!                 ▒  ▒▓ █▀█
 █▀█ ▒░  ░                                                           ░  ░▒ █▀█
 ▓▀█ ▒░                                                                 ░▒ █▀▓
 ▒▀█ ░▓                                                                 ▓░ █▀▒
 ░ █  ▒                                                                 ▒  █ ░
   ▓  ░                                                                 ░  ▓
 ░ ▒  ░                                                                 ░  ▒ ░
   ░                                                                    ░
 ░                                                                           ░
 ░▄░ ░       ██           ▄▄▄▄▄▓█▀█▀ ▀ ░ ▀ ▀█▀█▓▄▄▄▄▄           ██       ░ ░▄░
 ▒▄▒ ▓░   ████████  ▄▄▓█▌▀▀█▄▄▀▀               ▀▀▄▄█▀▀▐█▓▄▄  ████████   ░▓ ▒▄▒
▌▓▄▓▀ ▀▀▄    ██    ▐██▀ ▄██▀                       ▀██▄ ▀██▌▄▄  ██    ▄▀▀ ▀▓▄▓▐
█▀  ▓░  ▄ █▄▌██ ▄░  ▀█▌▐▓▀          RESPECTS         ▀▓▌▐█▀ ▀ ▄ ██▐▄█ ▄  ░▓  ▀█
 ▄▀ ▄ ▀▄   ▀▌▓█   ▀▄▄ ▀ ▀▄                           ▄▀ ▀ ▄▄▀   █▓▐▀   ▄▀ ▄ ▀▄
▐▌ ■░■ ▐▌  ▄▌░▓   ▄██   ▀  ▓                       ▓  ▀   ██▄   ▓░▐▄  ▐▌ ■░■ ▐▌
 ▀▄ ■ ▄▀ ▀▀▀▀ ▄▄▓▀▀▀           ▀      ▀ ▀      ▀           ▀▀▀█▄▄ ▀▀▀▀ ▀▄ ■ ▄▀
 █▀█ ▄▓▄ ▄▄█▀▀▀                                                  ▀▀█ ▄ ▄▓▄ █▀█
 ▌ ▐▄▄▓  ▄ ▐▌                                                     ▐▌ ▄  ▓▄▄▌ ▐
 ▌  ▀█▓ ▄▓▄▀       BBL - DDU - EEn - iNTENSiTY - JGT - RBS         ▀▄▓▄ ▓█▀  ▐
 ▌░   ▓  █                                                           █  ▓   ░▐
 ▌▒   ▒▄█▀                                                           ▀█▄▒   ▒▐
 ▌▓▌  ░                                                                 ░  ▐▓▐
 ▌██  ░                            SHOUTOUTS                            ░  ██▐
 ▌▐▓█                                                                     █▓▌▐
 ▌ ░▓█                                                                   █▓░ ▐
 █  ░██                                                                 ██░  █
 █▀▄ ▓██▄         DVT - FONT - iRONiSO - LAXiTY - PARADOX - SO        ▄██▓ ▄▀█
 █▀ ▄ ▓███▄                                                         ▄███▓ ▄ ▀█
 █▀  █▄▀▓█▀██▄                         ▓                         ▄██▀█▓▀▄█  ▀█
 █▀ ▀ ▀█▄▀▓█▄▀▀▓▄▄                  ▄▀ ▄ ▀▄                  ▄▄▓▀▀▄█▓▀▄█▀ ▀ ▀█
 █▀▄ ▀▄▀██▄▀▀█▄  ▀▀▓▄▄        ░  ▄▌▐▌ ■░■ ▐▌▐▄  ░        ▄▄▓▀▀  ▄█▀▀▄██▀▄▀ ▄▀█
 █▀█ ▄ ▀▄▀███▄▀▀█▄▄  ▀▀▓▄  ▄▄▄▓▓█▀  ▀▄ ■ ▄▀  ▀█▓▓▄▄▄  ▄▓▀▀  ▄▄█▀▀▄███▀▄▀ ▄ █▀█
 █▀█ █  ▀█▄▀█▄▀█▄▀▀█▄   █▓  ▀█ ▄ ▄ ▀ ▐ ▓ ▌ ▀ ▄ ▄ █▀  ▓█   ▄█▀▀▄█▀▄█▀▄█▀  █ █▀█
 █▀█ █ █  ▀█▄▀█ ▀██▄▀█▄ ▐█▓░  ▀ ■    ▐ ▒ ▌    ■ ▀  ░▓█▌ ▄█▀▄██▀ █▀▄█▀  █ █ █▀█
 █▀█ █ █ ▐▌▐██▐█▄ ▓██▐█▌██░   ░▌   ▄▀▐ ░ ▌▀▄   ▐░   ░██▐█▌██▓ ▄█▌██▌▐▌ █ █ █▀█
  ▀█ ▀████ ██▀████▐████▓▀   ▄▀▀▀▄ ▄▄▓▐ ░ ▌▓▄▄ ▄▀▀▀▄   ▀▓████▌████▀██ ████▀ █▀
   ▀█▄  ▀▀▀████▓▀▄█▓▀▀     ▐▌ ▀▓ ▌▀▀▀▀▄▀▄▀▀▀▀▐ ▓▀ ▐▌     ▀▀▓█▄▀▓████▀▀▀  ▄█▀
      ▀ ▄▄    ▀▀▀▀▀▀▀   ▄▌  ▀▄▄▄▀ ▀▀▀▄ ▀ ▄▀▀▀ ▀▄▄▄▀  ▐▄   ▀████▀▀ ▄▄ ▄▄ ▀
          ▀▀█▄▄▄▄▄▄▄▄▄████▄    ▄  ██▌▐ █ ▌▐██  ▄    ▄████▄▀        ▀▄▄
                ▀▀▀▀▀▀▀▀██▓▓░░  ▄  ▀ ▐ ▓ ▌ ▀  ▄  ░░▓▓██▀▀▄ H7/BREAK ▄▀
                         ▄▀ ▄ ▀▄  ▓ ▄▐ ▒ ▌▄ ▓  ▄▀ ▄ ▀▄    ▀▐▄    ▄▌▀
                        ▐▌ ▌ ▐ ▐▌ ░  ▐ ░ ▌  ░ ▐▌ ▌ ▐ ▐▌
                         ▀▄ ▀ ▄▀▄▄   █ ░ █   ▄▄▀▄ ▀ ▄▀
                           ▀▀▀ █  █  █ ░ █  █  █ ▀▀▀
                                ▀▀  ▐▐ ░ ▌▌  ▀▀
                                    █▐ ░ ▌█
                                   ▀▄▐ ░ ▌▄▀
                                     ▐ ▒ ▌
                                     ▐ ▓ ▌
                                    ▄▀ ■ ▀▄
                                   ▐▌ ■░■ ▐▌
                                    ▀▄ ▀ ▄▀
                                      ▀░▀

Files