How To Search For DOM-Based XSS!

👩‍🎓👨‍🎓 Learn how to find DOM-based cross-site scripting vulnerabilities. We are looking at the browser's developer tools, the Javascript debugger, and the concept of sources and sinks!

Overview:
00:00 Intro
00:29 Inspecting Sources
02:15 DOMXSS Wiki
02:44 Location.search
03:44 Inspect the DOMXSS source
05:25 Using the Debugger
06:16 Inspecting the DOMXSS sink
07:10 Exploiting the vulnerability
07:49 Summary

For more information, check out https://blog.intigriti.com/hackademy/....

🔗 DOM-XSS Wiki: https://github.com/wisec/domxsswiki/wiki
🔗 Portswigger XSS Challenge: https://portswigger.net/web-security/...

---

🧑‍💻 Sign up and start hacking right now - https://go.intigriti.com/register

👾 Join our Discord - https://go.intigriti.com/discord

🎙️ This show is hosted by   / pascalsec   (‪@Hacksplained‬) &   / intigriti  

👕 Do you want some Intigriti Swag? Check out https://swag.intigriti.com/