Cross-Site Scripting Attacks and Defense

Cross-Site Scripting Attacks and Defense

Defend Web Applications from XSS and Session HijackingBy Omar Underwood
Michael Caine
Listen with Sir Michael Caine™ and 1,000+ voices
Length7h 43m

About this audiobook

XSS testing web security book ethical hacking guide — The only hands-on, working tester's guide to finding, exploiting, and fixing Cross-Site Scripting flaws. Set up your own home lab, work with real payloads, and apply proven remediation patterns. Whether you're a beginner or a seasoned pro, this book turns theory into practice. What You'll Learn How to detect reflected, stored, and DOM-based XSS in modern web apps Building a safe home lab with vulnerable targets and capture tools Crafting and customizing real-world payloads that bypass filters Remediation patterns: output encoding, CSP headers, and input validation Integrating XSS testing into your SDLC and CI/CD pipeline Who This Book Is For Penetration testers, bug bounty hunters, security engineers, and web developers who want to master XSS from the attacker's and defender's perspectives. No prior XSS experience needed—just curiosity and a willingness to break things. Why This Book Stands Out Unlike academic texts, this book is built for the trenches. Every chapter includes a lab exercise, a real payload example, and a fix pattern you can apply immediately. You'll learn by doing, not just reading. Competitor authors: [placeholder] and [placeholder] cover similar ground, but this book goes deeper into practical exploitation and remediation for today's frameworks. Start finding XSS flaws today—grab your copy and build your testing toolkit.

Audiobook details

GenreTechnology
Length7 hrs 43 mins
Narrated byListen with 1,000+ voices
FormateBook with Audio
LanguageEnglish

Table of contents

1Introduction
12Chapter 10 — Advanced Account Takeover – Chaining with CSRF and Phishing
2Preface
13Chapter 11 — Chaining XSS with CSRF – Forging User Actions
3Chapter 1 — Project Foundation – Setting Up the SecureBlog Lab
14Chapter 12 — Chaining with File Upload – Exploiting Image Upload Features
4Chapter 2 — XSS Fundamentals – What Makes This Attack Tick
15Chapter 13 — Defensive Coding – Server-Side Output Encoding
5Chapter 3 — Mapping the Attack Surface – Finding Every User Input
16Chapter 14 — Content Security Policy – An Additional Layer of Defense
Show all chapters
6Chapter 4 — Reflected XSS in Practice – Exploiting the Search Feature
17Chapter 15 — Secure Framework Usage – Avoiding Common React/Angular Pitfalls
7Chapter 5 — Stored XSS in Comments – Persistence and Propagation
18Chapter 16 — Automated Tools and Scanners – Finding XSS Faster
8Chapter 6 — DOM-Based XSS – Client-Side Vulnerabilities in User Profiles
19Chapter 17 — Responsible Disclosure and Bug Bounties – Reporting Your Findings
9Chapter 7 — Payload Crafting – From Simple Alerts to Stealthy Exploits
20Chapter 18 — Final Project Hardening – Complete Fix and Lessons Learned
10Chapter 8 — Advanced Evasion – Bypassing Filters and WAFs
21About the Author
11Chapter 9 — Session Hijacking – Stealing Cookies via Stored XSS

You may also like

Tea-Blending as a Fine Art
Tea-Blending as a Fine ArtJoseph M. Walsh2h 37m$2 · $0.00
The Le Sage Theory of Gravitation
The Le Sage Theory of GravitationGeorges-Louis Le Sage1h 3m$2 · $0.00
Grocers' Goods
Grocers' GoodsFrederick B. Goddard2h 31m$2 · $0.00
The Flip Side of History
The Flip Side of HistorySteve Silverman5h 42m$17
Hill Street Blues
Hill Street BluesBill Brown Jr.40m$4
The Atomic Fingerprint: Neutron Activation Analysis
The Atomic Fingerprint: Neutron Activation AnalysisBernard Keisch1m$1 · $0.00
A collection of Latin maxims & rules, in law and equity
A collection of Latin maxims & rules, in law and equityPeter Halkerston5h 3m$1 · $0.00
Electric Bells and All About Them: A Practical Book for Practical Men
Electric Bells and All About Them: A Practical Book for Practical MenSelimo Romeo Bottone2h 42m$2 · $0.00
Chlorination of Water
Chlorination of WaterJoseph Race43m$2 · $0.00
A Concise Dictionary of Middle English from A.D. 1150 to 1580
A Concise Dictionary of Middle English from A.D. 1150 to 1580Walter W. Skeat, A. L. Mayhew24h 48m$1 · $0.00
On the Continuity of Effect of Light and Electric Radiation on Matter
On the Continuity of Effect of Light and Electric Radiation on MatterJagadish Chandra Bose47m$1 · $0.00
The Anatomy of Bridgework
The Anatomy of BridgeworkWilliam Henry Thorpe4h 14m$2 · $0.00
On a Dynamical Top, for exhibiting the phenomena of the motion of a system of invariable form about a fixed point, with some suggestions as to the Earth's motion
On a Dynamical Top, for exhibiting the phenomena of the motion of a system of invariable form about a fixed point, with some suggestions as to the Earth's motionJames Clerk Maxwell36m$2 · $0.00
Paint Technology and Tests
Paint Technology and TestsHenry A. Gardner5h 32m$1 · $0.00
Lynch-law; an investigation into the history of lynching in the United States
Lynch-law; an investigation into the history of lynching in the United StatesJames Elbert Cutler9h 59m$1 · $0.00
Primes to One Trillion
Primes to One TrillionVarious11m$1 · $0.00
The Origin of Vertebrates
The Origin of VertebratesWalter Holbrook Gaskell21h 35m$1 · $0.00
Hormones and Heredity
Hormones and HeredityJ. T. Cunningham3h 56m$2 · $0.00
The Money Pit, Vol. 4
The Money Pit, Vol. 4Tom Kraeutler, Leslie Segrete9h 42m$20
Newspaper Reporting and Correspondence
Newspaper Reporting and CorrespondenceGrant Milnor Hyde5h 51m$2 · $0.00