November 2019
Beginner
550 pages
13h 14m
English
Stored XSS is persistent on the web page. The attacker injects malicious code into the web application on a server. The code/script is permanently stored on the page. When a potential victim visits the compromised web page, the victim's browser will parse all the web code. However, in the background, the malicious script is being executed on the victim's web browser. This allows the attacker to retrieve any passwords, cookie information, and other sensitive information that is stored on the victim's web browser.
Read now
Unlock full access