Detecting & Exploiting Cross-Site Scripting (XSS)

[@digitalcivilulydighed]

Awesome channel you have - found you on the episode of chuck!

[@kovacsemanuel1547]

Hello Tyler, Thanks a ton for that cookie script! I also tend to forget the scripts for exfiltrating cookies, so this will be super helpful in my pentests. Keep up the awesome work-really appreciate it!

[@alexperrakis]

I have found my inner peace with you and your authenticity! Thank you for this incredible content

[@Ruslanalm]

Short videos are super helpful and easy to watch, thank you! 👍

[@DrSn1p3r_Sec]

Hey man ! Awesome video, really enjoyed it. XSS is something Im not used to work with quite often so your video about it helped a lot to understand the basic around it. Keep it up : ))

[@Deven210]

Hey Tyler! Thanks for the video on XSS, I’m actually studying for my CYSA+ right now and this helps reinforce part of the OWASP top 10 for me. Greatly appreciate your videos, I’m looking forward to the next one.

[@TylerRamsbey]

Good luck with the exam! I took that cert about 2 years ago! :)

[@Deven210]

@@TylerRamsbey thank you sir!

[@csais2472]

nice job explaining all the process and tools used.

[@TheHaircutFish]

Great both live and recorded!!!

[@readysetexploit]

Great video! Thank you for the shout out and using my room as an example :D

[@CartoonBoom-vm2ky]

Great video man, keep up the good work🎉🎉

[@muhammadtayab]

man amazing cheer..........!!

[@lool7922]

Awesome channel :)

[@vikramsharma-tr5df]

You're amazing sir

[@muhammadtaha2578]

great video sir

[@iMshadab]

thank you sir

[@funsuriya]

Hi Tyler, Awesome video! Do you have any series for complete beginners? I'm lost on where to start. I only have basic Linux and a bit of Nessus knowledge. Do you have any videos or playlists on it?

[@TylerRamsbey]

I recommend creating an account at tryhackme.com and starting with the beginner learning paths

[@funsuriya]

@@TylerRamsbey awesome thanks for the speedy response : )

[@CodeDeflect]

I am a complete beginner in bug bounty.Can you recommend anything for me?

[@JNET_Reloaded]

Nice

[@Sickcoin]

Can you give link to your CVE?

[@TylerRamsbey]

For sure! rhinosecuritylabs.com/research/silverpeas-file-read-cves/

[@daddybruce8084]

the problem with this is that the victim now has YOUR IP

[@TylerRamsbey]

Honestly - not really. When I do any pentesting or bug bounty I always use VPNs.