Reflected XSS (Tag Attribute src)

Hello friends, today I will show you the steps of detecting a vulnerability that I encountered in Web Application Security Tests in my project named Saka Reflected XSS (Tag Attribute src) and exploiting this vulnerability.

What’s XSS

You can find detailed information about the XSS vulnerability in the article below.

Cross Site Scripting (XSS)

Running the Application

Docker

docker pull erdemstar/saka:reflected-xss-tag-attribute-src
docker run --rm -d -p 80:80 erdemstar/saka:reflected-xss-tag-attribute-src

Visual Studio 2019 IDE

git clone https://github.com/ErdemStar/Saka
cd reflected-xss-tag-attribute-src
- mouse click …

appsec devsecops infosec reflected xss saka security tag xss