Cross Site Scripting (XSS)

  1. Impact and Exploitation Scenarios
    1. Session Management Attacks
      1. Session Fixation
        1. Session Hijacking
          1. Token Manipulation
          2. Data Exfiltration
            1. Local Storage Access
              1. Session Storage Exploitation
                1. DOM Content Extraction
                  1. Form Data Harvesting
                  2. Credential Harvesting
                    1. Fake Login Form Creation
                      1. Keylogger Implementation
                        1. Password Manager Exploitation
                        2. User Impersonation
                          1. Administrative Action Execution
                            1. Unauthorized Transactions
                              1. Social Engineering Amplification
                              2. System Compromise
                                1. Browser Exploitation
                                  1. Plugin Vulnerability Chaining
                                    1. Local File Access Attempts
                                      1. Network Reconnaissance
                                      2. Business Impact
                                        1. Reputation Damage
                                          1. Compliance Violations
                                            1. Financial Losses

                                          Previous

                                          6. Payload Construction and Techniques

                                          Go to top

                                          Next

                                          8. Vulnerability Discovery Methods