In this lesson, we will talk about excess or crosseyed scripting now crosseyed scripting is a type
of security vulnerability typically found in Web applications, and attacker may use excess in order
to inject blindsides scripts into Web pages and attacker may use accesses to bypass access controls.
Right.
An attacker may also use accessors in order to steal cookies or for phishing attacks or for other exploitation
purposes.
Right.
So let's talk about the process of exercise.
First of all, we will find an input parameter and then we will try to access a script in that input
parameter.
Now, what I mean by input barometer, if you visit a e-commerce website, you will find and search
bar to search for the different products.
So we will try to run accessors on that search bar, OK.
And if we succeed, then there may be chances that there is excess vulnerability on that Web page.
And to make sure we will move on to the next step, which is try to inject JavaScript code into that
input parameter, and if we succeed, then make sure there must be an excess vulnerability.
OK, so we will go for the exploitation using access.
OK, now let's talk about the types of excesses.
So there are military type of crosseyed scripting.
The first is restricted access, which is a most common vulnerability found in web applications.
The other one is stored exercice and the third one is don't based exercice.
Don't worry, we will talk about all of them in detail.
Incoming lectures.
Now, I hope you all heard about a word bug bombi.
So Bug means finding weakness in a website.
And if the venue reported back to the owner of the website, then maybe the company or the person will
provide you a reward in return.
So the reward you earn is the bounty.
OK, so I will show you what kind of genuine websites will help you to earn bounty by hunting.
OK, now I'm not providing any kind of earning guarantee, but my aim is to show you or to make you
aware about the fact that you can also earn money by finding bugs or finding weaknesses in Web applications.