Hacking Dating Apps with XSS | CTF Walkthrough скачать в хорошем качестве

Hacking Dating Apps with XSS | CTF Walkthrough

This YouTube video explores cybersecurity flaws in dating apps, specifically injection attacks and cross-site scripting (XSS) exploits. The video uses HackTheBox OnlyHacks challenge for demonstration. **** Receive Cyber Security Field, Certifications Notes and Special Training Videos https://buymeacoffee.com/notescatalog... Writeup https://motasem-notes.net/hacking-dat... ****** Store https://buymeacoffee.com/notescatalog... Patreon   / motasemhamdan   Instagram   / mastermindstudynotes   Google Profile https://maps.app.goo.gl/eLotQQb7Dm6ai... LinkedIn [1]:   / motasem-hamdan-7673289b   [2]:   / motasem-eldad-ha-bb42481b2   Instagram   / mastermindstudynotes   Twitter   / manmotasem   Facebook   / motasemhamdantty   *** 00:00 Introduction to Dating Apps Vulnerabilities 00:08 Overview of Past Cyber Attacks on Dating Apps (Bumble, Tinder) 00:22 Practical Exploitation Scenario 00:36 Examining the Dating App Signup Process 01:18 Exploring the Matches & Messaging System 02:45 Identifying Possible Injection Points in the App 03:04 Testing HTML Injection in Messages 04:13 Executing a Simple Cross-Site Scripting (XSS) Attack 04:52 Understanding Stored & Reflected XSS 05:27 Attempting a Cookie Stealing XSS Payload 06:02 Setting Up a Python Web Server to Receive Requests 06:42 Deploying a Cookie Stealing Script 07:26 Inspecting Browser Cookies for Validation 07:57 Testing Alternative XSS Payloads 08:22 Attempting a Keylogger Injection 09:33 Using RequestBin for Advanced Payload Delivery 10:22 Deploying a New Payload with RequestBin 10:50 Extracting Stolen Cookies from RequestBin Logs 11:22 Replacing Cookies in the Browser to Hijack an Account 11:50 Successfully Taking Over Another User’s Account 12:08 Conclusion & Discussion on Dating App Security 12:13 Flag Extraction (Hack The Box Challenge)