Zed Attack Proxy Cookbook

9

Client-Side Testing

When tackling client-side testing, the types of attacks are focused purely on the client (browser) and not vectors that move to exploit the server side of an application’s architecture. These types of attacks focus on client-side components of a system or application, such as the web browser or operating system. To find vulnerabilities and flaws, testers may employ a range of tools and methodologies, including manual testing, automated testing tools, and network scanners. You will learn to actively attack common issues, such as document object model (DOM)-based cross-site scripting (XSS), JavaScript execution such as disclosing an end user’s session cookies, HTML injection, where an attacker injects malicious code, client-side ...