What you'll learn
Ethical Hacking techniques based on javascript
Exploiting XSS flaws to inject custom javascript
Tamper with page content, links, forms, and cookies
Advanced attacks using key loggers and mouse capture
Use javascript to support Spear Phishing efforts
Combine exploits to retrieve the passwd file
Learn to use javascript to trigger Command Injection attacks against the operating system
Find out how to move from reflected XXS attacks to employing XSS at scale with persisted attacks
Exploit account recovery features of an application to collect user secret questions and answers

Description
You've found a XSS vulnerability….but now what?

Has a client ever wanted you to demonstrate the danger of a vulnerability you found for them?

If so, then you need to Learn Ethical Hacking with javascript! After this course, you will be able to exploit web security vulnerabilities by using a variety of skills and techniques centered on javascript.

After a quick review of some common web application flaws, we'll jump right into using javascript as an offensive weapon against the application and clients.

Each topic is presented from the perspective of requiring the pentester to demonstrate how a vulnerability can be exploited and the potential impact of not taking corrective action. The course provides a balanced mix of theory, code, and live demonstrations of each exploit in action.

Learn to tamper with site content - altering the page, forms, links, and functionality. Then take it to the next level by abusing HTML forms to capture additional data on form submission, sending that data to a server you control.

See how to disclose the contents of user cookies, then quickly move to stealing the cookies and sending them to another server. Learn to steal credentials and abuse application authentication.

Further compromise users by capturing mouse interactions and implementing a custom key logger. Learn to abuse knowledge-based authentication schemes such as the secret question/answer approach for account resets.