Cross-site Scripting (XSS) is a client-side code injection attacks where the attacker aims to execute malicious scripts in a web browser of the victim by including malicious code in a legitimate web page or web application. This course teaches how to identify, test, and exploit these vulnerabilities.
On successful completion of this course, learners should have the knowledge and skills to:
- Define the types of cross-site scripting vulnerabilities
- Test applications for cross-site scripting vulnerabilities
- Exploit cross-site scripting vulnerabilities
If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.