Cross Site Scripting (XSS) tutorial for Beginners

// Membership //
Want to learn all about cyber-security and become an ethical hacker? Join this channel now to gain access into exclusive ethical hacking videos by clicking this link: / @loiliangyang
// Courses //
Full Ethical Hacking Course: www.udemy.com/course/full-web...
Full Web Ethical Hacking Course: www.udemy.com/course/full-web...
Full Mobile Hacking Course: www.udemy.com/course/full-mob...
// Books //
Kali Linux Hacking: amzn.to/3IUXaJv
Linux Basics for Hackers: amzn.to/3EzRPV6
The Ultimate Kali Linux Book: amzn.to/3m7cutD
// Social Links //
Website: www.loiliangyang.com
Facebook: / loiliangyang
Instagram: / loiliangyang
LinkedIn: / loiliangyang
// Disclaimer //
Hacking without permission is illegal. This channel is strictly educational for learning about cyber-security in the areas of ethical hacking and penetration testing so that we can protect ourselves against the real hackers.

[@Bipantheytbr]

Loi is our best uncle who always has surprised us with his contents.

[@comosaycomosah]

damn son you almost have a million subscribers! your videos are on point!

[@darrbest]

another great one. yes you make it look so easy.

[@shurikensage]

You're my favourite hacker

[@noobintheinternet]

Me trying to recognise which video is flipped and which video is original

[@Motasim11]

😂😂😂😂😂😂 this took me out man

[@noobintheinternet]

@@Motasim11 Bro I forgot I made this comment 😅

[@nonsense101]

You make it look. So easy. 😮 Mr loi. Very interesting. Keep up. The grate work. And easy to follow instructions

[@WitzigLustigKomisch_TG]

You make verry nice Content 👍

[@QuintessentialDio]

Great Video as always❤

[@nirbhaymishra4222]

Very Information and Interesting Thanks for sharing ❤

[@user-gn7fq3lu8q]

Не плохой урок мой косоглазый друг) я увидел для себя пару полезных моментов

[@user-pe7rh1pz7i]

Hi hacker loi,,, I'm trying to setup my apache2 webserver and it isn't responding,,, it is depicting an error what could be the problem

[@blackanonymous]

Thanks Mr. hacker Loi keep it up❤!

[@laxmiprasanna4092]

So to do XSS , the hacker needs to be already there in your computer ? Can a website from one tab attack another ?

[@oxy_786]

thats why i make sure to validate my webapp(s) query string before processing

[@dafoxangel]

Thank you sir

[@janekmachnicki2593]

Great tutorial Mr Loi

[@xnuvers0077]

Can you give me tutorial about vulnerable XST (cross site tracing) ? Method Trace is Allowed

[@foydoitro2830]

Can you hack car when breaking 1Million subscribers🥳

[@dimosthenistsirogiannis597]

Yes but you should run the xss payload to his computer for the reflected cross site scripting? How will you get the cookies from a specific person

[@Palidon]

The reflected XSS is supposed to be visited by the victim. It's up to the attacker how he delivers the payload. It could be sent via a phishing email or can be used in combination with the stored XSS

[@itsstillfunny109]

Loi..you should create a hacking course 4 real

[@ThePrryns]

Hi, please can you do a video on how to do XSS bypass filters? If the javascript has ", /, script, and alert"... How do I even create a popup box in the search query when these are not allowed. Also, without using Kali Linux or python.

[@PrakashChAwal]

do u find the solution?

[@ThePrryns]

@@PrakashChAwal Nope, until today I haven't found the solution. Do you know how to bypass?

[@dclxviclan]

You tutorials is the best learning , Loi, you can record full roadmap for hacker$? All road ?

[@amrzakaria5290]

Thanks a lot.

[@rajeshkoneru6641]

hello iol what is that orangehrm application

[@user-xv7di2ew6q]

Please make a tutorial about gain access into phone mobile connected with same network wireless

[@AUselessTrader]

There is a simple javascript script i made that locks the website you paste it into(only locks it for you) and you have to either refresh or close it

[@ssenyondwafred156]

Tht website had no domain name in the URL, it was using just ip Adress, can it apply to an HTTPS website?😊

[@AUselessTrader]

I actually made snake run using only pop ups. Took a very long time

[@superstarvideomaker2782]

Plz do hacking on trading site I want to understand it

[@cauvang8204]

how can i know these code xss line in your file xss.text??

[@tekklov2646]

Wow thanks for teaching us! ❤

[@belkYT]

3:45 how did you get the url

[@user-bo1xm8by3p]

How does it show the script I mean which keys in keyboard

[@liamhecht1092]

how did you found the parameter in the url ?

[@infosecna9er]

Please give some new ideas about keylogger project

[@maunghtoo2804]

How to become member

[@jere2239]

Hello sir, Can I please maintain your website😊.😊😊😊😊😊😊

[@13thravenpurple94]

since this is URL manipulation, can add-ons like ClearURLs or Skip Redirect be of help?

[@remus5613]

no

[@h5e]

Love you man💘

[@termireum]

Hi Mr. Loi I really enjoy watching your videos, just got $$$$ bounty few weeks ago after watching your video about XSS. Can you upload a video about WEB3 vulnerabilities such as reentrancy attack etc etc? Thanks.

[@areoglass2831]

from what i know, like on 2010 - 2013/2015 it was so much easier to hack and ddos websites

[@DailyRedditStories10029]

ddossing is still extremely easy for websites without cloudflare protection, which there are many, even one multithreaded script on one computer will take care of budget websites.

[@rojoroj9777]

Sir, can make videos on what are the different ways u can access to anyone's whatsapp with or without target phone. And also steps to avoid such attacks ...

[@prodrigon5156]

💀

[@PrakashChAwal]

I am trying the same thing but alert dont popup.

[@felixmilome]

For beginners??? Could you do one for dummies?

[@LandenMoran]

Can you please help me hacker loi, a bad hacker got my email and all my data pleas help me get it back

[@Expunged112]

I can help, I'll just hack into ur account and change the password, and then give it to you. I just need the email.

[@trinib1]

how do you hide from the men in black?

[@user-vj5mj3fj1s]

hey could u help me man my email password got changed by someone and i cant change it back

[@learnlinuxwithmellwm]

Is it possible to send files to computer 🖥️ in the same network without their concern

[@janekmachnicki2593]

possible matey

[@CPH_python]

Hi loi🔥💯

[@jinanezrh6175]

The folder with XSS.txt where can i find it ? Thank you.

[@x-bb5dt]

Write command which he wrote in the terminal, that wordlists/wfuzz/injections

[@ItzGoop]

Is there any way you can break into my gmail account and change its password because I’ve exhausted everything i could to recover it but i cant

[@user-tc9uz7zy8d]

Make a tutorial on how to root any android phone please

[@yoshimochii]

may I ask how did to access the site you're using?

[@HimanshuNirmalkar-yh2lo]

If you got please share

[@syedsohaibhasan6358]

Mr Loi Liang Yang my best teacher

[@AbdulMalik-we3wx]

Your website is not working. Why???

[@user-sb3wm1xm7p]

Just Perfect, Perfect, PEEEEEEEEEEEEEERFECT .

[@InfixLyrics]

but basically, this is not kinda working now. you know, many of them use CMS for websites. Plus, parameters like ?token ?user are not taking scripts at all. it must be written in the user website for be a xss attack. if it's just tested and took as a wrong value, its over.

[@Funfacts_everyday]

Kali Linux error can’t install

[@Loobie]

Hi, I need help to reset my gmail password.

[@danishtrader4408]

Hi Loi Great Content, Is it possible to hack youtube, to remove suspension of an old account, without then notice?😬

[@mahajaya8590]

PLEASE DO HACKING LOTTERY AND MATKA NUMBERS SITE

[@Scorpion_Yug]

Itne bade level pe hacking hogi toh stta matka sites band ho jayegi

[@itsdknation540]

I decided to respond on a new vid, but can you please help me get my old Gmail back it has my Fortnite account linked to it, and I haven't logged in in a while I don't have the password the number or nothing and I'm not logged into it anymore. im not to smart at this stuff btw

[@MohamedYNia]

What do you recommend I use a VPN or a proxy?

[@noobboy2810]

Ya but web cannot be responce 👍

[@etano1701]

How to do this with a persistent cookie

[@cameronrich2536]

This dude a savage

[@issacnetero]

No I'm never gonna be hacked by any ...

[@justiceurasa2346]

Helloo my brother Loi Liang Yang i appriate your work Bro, but to my side i have one problem here i fail to crack my RAR file password wer its very import to me please help me if possible Brother thanks

[@Snipe_BLOX]

😂 the first part

[@shiuthmohamed4345]

one of the best of best..

[@baeg1689]

solid content sir

[@maxmaniful]

Can you please help me get into my gmail? I got hacked by someone and they changed my password

[@Expunged112]

hacking into it is not that easy, I can, but giving me your email would make it easier for me.(I hope so)

[@morellotoxic1140]

DO SOME PROJECTS WITH PYTHON

[@user-xv7di2ew6q]

Hi Mr hacker loi ❤

[@lannymoran]

wish you could get my photos that were hacked and stolen

[@shadirvanislive]

The laugh💀

[@s.nikolic497]

great video but i still don't understand anything hahah

[@handylingga904]

coming to my country and you get note anything

[@financetech3618]

How hackers hack social media accounts, Please tell us about that ???

[@teokarlsson305]

great video! But please dont bake your subs into the video

[@user-mh1tj1no9b]

Love your videos keep going

[@axzphere03]

Pls teach me sensei

[@user-vn8vo8uz9h]

can you please hack a one website for me ?

[@onehunnittt]

I look up to you man great info

[@xkenxkaneki]

finally a new video

[@AnshaAli-xf4cc]

Yo can u help me someone has got my email address and password help me

[@Expunged112]

I can hack into ur account and change the password. but it's not an easy task and will take some weeks.

[@JhonDoe-eq2sz]

wow

[@shellgenius]

Javascript script tag

[@hz_wan]

Hey bro can you help me to take my email back😭😭😭😭

[@akiradennisM]

Looks cool, imma watch it

[@Soheib007]

Just click ok and smile , you should be honored getting hacked by him

[@r-test3668]

VERY NICE!!!!

[@user-vg3jh7lg6o]

Nice video

[@CyberSphereYT]

Can You Hack a website which i will tell

[@Expunged112]

Do it yourself

[@morellotoxic1140]

GG BROO

[@Herobrinepvper]

I wanna try it on your website but please don't hack me I am just learning ok❤

[@learnlinuxwithmellwm]

It's not vulnerable bruh 😂😂

[@Herobrinepvper]

yea i know but i stay wanna try :)@@learnlinuxwithmellwm

[@pylab22]

First one❤

[@ojochegbe_]

First to comment😊

[@Belizard7]

40th like

[@HolyThugQuotes]

First to view

[@askk69420]

not first