XSS Include

This exercise demonstrates the exploitation of a Cross-Site Scripting Include (XSSI) vulnerability commonly found in modern applications relying on JSONP. You'll learn how to access sensitive data by creating a simple malicious page.

Skills covered

Topics