How to hack API's - API-Only XSS (XSS) - Owasp Juice shop
What is this video about:
Learn how to exploit API vulnerabilities with API-Only XSS (Cross-Site Scripting) in Owasp Juice Shop, uncovering crucial security flaws and mitigation strategies.
Short summary:
So we have already started Solving Owasp juice shop challanges if you are want to aware of than i ahve pasted alink to complete playlist in the video description..
Ok so that out of the way let solve the challange shall we..
Now to solve this *API-only XSS* we need to do few things first…
*Find the api calls.* To get ready for your interview, read through the job description and make sure you know what is expected of the role.
*And then run the iframe code from the api.* As the challange clearly states we cannot use front end for this.
So google developer tools is our friend.
I will come over to google developer tools and look for network tab in here i will find main.js and in the i will search for api..
Link to complete playlist:
• Follow the DRY principle while registering...
What is SQL injection:
• How to install OWASP Juice Shop and Exploi...