Ali Sher Shahid

4.29K subscribers

69 videos

Hey, this is the place where we delve deep into the world of cybersecurity! 🛡️ In today's digital age, safeguarding your online presence is more critical tha...

Latest Videos

Reflected XSS protected by CSP, with CSP bypass (Lab #29)

Exploiting XSS to bypass CSRF Defense (Lab #28)

Exploiting cross site scripting to capture password (Lab #27)

Exploiting cross site scripting to steal cookies (Lab #26)

Reflected XSS with AngularJS sandbox escape and CSP (Lab #25)

Reflected XSS with AngularJS sandbox escape without strings (Lab #24)

Reflected XSS into a template literal with angle brackets, single, double quotes, backslash (Lab#23)

Stored XSS into onclick event with angle brackets and double quotes HTML encoded and single (Lab#22)

Reflected XSS in a JavaScript URL with some characters blocked (Lab #21)

Reflected XSS into a JavaScript string with angle brackets and double quotes HTML encoded (Lab #20)

Reflected XSS into a JavaScript string with angle brackets HTML encoded (Lab #19)

Reflected XSS into a JavaScript string with single quote and backslash escaped (Lab #18)

Reflected XSS in canonical link tag (Lab #17)

Stored XSS into anchor href attribute with double quotes HTML encoded (Lab #16)

Reflected XSS into attribute with angle brackets HTML encoded (Lab #15)

Reflected XSS with some SVG markup allowed (Lab #14)

Reflected XSS with event handlers and href attributes blocked (Lab #13)

Lab #12 Reflected XSS into HTML context with all tags blocked except custom ones

Reflected XSS into HTML context with most tags and attributes blocked (Lab #11)

Stored DOM XSS (Lab #10)

Reflected DOM XSS (Lab #9)

DOM XSS in AngularJS expression with angle brackets and double quotes HTML encoded (Lab #8)

DOM XSS in jQuery selector sink using a hashchange event (Lab #7)

DOM XSS in jQuery anchor href attribute sink using location search source (Lab #6)

DOM XSS in innerHTML sink using source location search (Lab #5)

DOM XSS in document write sink using source location search inside a select element (Lab #4)

DOM XSS in document write sink using source location search (Lab #3)

Stored XSS into HTML context with nothing encoded (Lab #2)

Reflected XSS into HTML context with nothing encoded (Lab #1)

Exploiting XXE to retrieve data by repurposing a local DTD (Lab #9)