Stored, Blind, Reflected and DOM - Everything Cross--Site Scripting (XSS)

I'll be honest, XSS are not my favourite kinds of bugs to hunt for, even now and I don't think they are great for beginners. BUT I have been outvoted by the community on this one so here's how to find your first bug, XSS edition. I'm going to talk about each type of XSS and show you how I actually approach a target when I'm looking for XSS bugs. I will be the first to admit I've found 1 XSS in the wild and it was a DOM based XSS!
This series couldn't happen without the support of our sponsor Bugcrowd, Bugcrowd is the best place to start hacking with a wide range of public and private programs from APIs to Desktop Applications and everything in between. Not ready to jump into a public program yet? Fill out your platform CV and sign up for a waitlisted program. Tell Bugcrowd a bit about your skills, previous certifications or experience and they’ll match you up with the right program using their industry-leading CrowdMatch technology. Whatever your level, there’s a place for you in the crowd. You can sign up with my link here: bugcrowd.com/user/sign_up.
- Social Media -
Discord: insiderphd.dev/discord
Patreon: / insiderphd
Twitter: / insiderphd

[@bradnaylor35]

Great video! You have a serious aptitude for teaching. Enjoying all the bug bounty basics lessons

[@Makingmoneyonli]

Great content Learned a lot of new things after only doing CTFs for a long time going into the real world to capture real world bugs and seems really overwhelming.

[@LearnTermux]

waited for this video for a long time

[@ferdusalam7260]

I AM JUST WONDERING THE SAME TOPIC VIDEO AND DIDN'T UNDERSTAND WHERE TO LERAN AND I JUST OPEN KZbin AND I GET YOUR VIDEO! :)

[@InsiderPhD]

I read your mind 🤔

[@eyephpmyadmin6988]

I was 13 and found a reflected xss on NASA's main website and if I only knew that was a valuable vulnerability and that bug bounties where a thing(I think they were back then) I think about it often

[@user-hf9bh7pg1q]

When I was 13 I found corn 🌽. And subsequently discovered some of my own vulnerabilities. 😊

[@jub0bs]

Thanks for the video, Katie! I particularly enjoyed the history intro. What resources did you rely on for that bit? Also, what's that infographic you mention at 18:43? I didn't quite catch the name, and the video transcript isn't very useful...

[@InsiderPhD]

Oops completely forgot to include it! twitter.com/s0md3v/status/981465370736320513 S0md3v has done a ton of these twitter.com/s0md3v/status/1057985696193888256 History comes via the tangled web and and thehistoryoftheweb.com/

[@jub0bs]

@@InsiderPhD Excellent! Thanks!

[@Shadabkhan-sn7hw]

Glad first view. I like the @InsiderPhD content. Always has something new to learn.

[@amoh96]

Hello thank you about impact alot of people say CSRF is die :( and im just starting learning about CSRF what u think ! ?

[@orbitxyz7867]

🎉🎉❤

[@learn-with-noob-007]

I'm fast 😂❤ love your content ❤❤🎉

[@firosiam7786]

It's been a while 2 weeks since last post hope u are OK after the hospital issues and all that came up

[@InsiderPhD]

Recovering still but doing better!

[@techslugz]

Yaaay I was first to like! Whoop whoop 🎉🎉😊🙃

[@cris305bleach]

I'm so happy to see that you are making videos again, I hope you are feeling great Katie! sending good vibes form Latin America. 4th xD