OWASP Top 10: A7 - Cross-site Scripting

OWASP 2021
  • 7 Videos | 36m 24s
  • Includes Assessment
  • Earns a Badge
Most web apps accept some kind of input, whether from users or through other automated means. All app input must be treated as untrusted and must be vigorously validated to ensure application and data integrity. In this course, you'll learn the difference between Java and JavaScript, as well as what cross-site scripting is and how it can compromise a web site and its visitors. Next, you'll learn how to execute various XSS attacks against an intentionally vulnerable virtual machine, including through web forms. You'll also explore how to use XSS to hijack a user web browser and how to mitigate XSS attacks.

WHAT YOU WILL LEARN

  • discover the key concepts covered in this course
    describe how Java and JavaScript are used in web applications
    recognize how Cross-site Scripting (XSS) attacks occur
    run a XSS attack through web page forms
  • run a XSS attack to hijack a client web browser
    deploy security controls to mitigate XSS attacks
    summarize the key concepts covered in this course

IN THIS COURSE

  • Playable
    1. 
    Course Overview
    1m 30s
    UP NEXT
  • Playable
    2. 
    Java and JavaScript in Web Applications
    6m 23s
  • Locked
    3. 
    Cross-site Scripting Attacks
    6m 14s
  • Locked
    4. 
    Executing XSS through Web Page Forms
    6m 7s
  • Locked
    5. 
    Compromising a Web Browser through XSS
    9m 38s
  • Locked
    6. 
    Mitigating XSS Attacks
    5m 35s
  • Locked
    7. 
    Course Summary
    56s

EARN A DIGITAL BADGE WHEN YOU COMPLETE THIS COURSE

Skillsoft is providing you the opportunity to earn a digital badge upon successful completion of this course, which can be shared on any social network or business platform

Digital badges are yours to keep, forever.