XSS Demo: Juice Shop 9.x dances while leaking credentials
iSpeech.org
This short demo shows how severe the impact of Cross-Site-Scripting (XSS) on a web application can be: It makes the OWASP Juice Shop shake and dance! It uses the distraction to also embed a key logger which sends all key strokes to a third party server!
To run this demo yourself visit https://github.com/wurstbrot/shake-logger and follow the instructions!
video, sharing, camera phone, video phone, free, upload
2019-09-15 18:13:09
source
Gloss