Scribd Logo
Upload

Welcome to Scribd!

  • Javascript For Pentesters

    Uploaded by

    John Stuart
    16 views5 pages
    This document discusses using JavaScript for penetration testing purposes. It covers using JavaScript to parse HTML pages extracted from cross-site requests. Parsing HTML with JavaScript is useful for penetration testing as it allows extracting tokens from pages and traversing applications for cross-site scripting in a more programmatic way than manual analysis. The document is presented by Vivek Ramachandran and is part of a training from SecurityTube.net on using JavaScript for tasks like HTML parsing that are common in penetration testing.

    Original Description:

    Original Title

    hhh

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    This document discusses using JavaScript for penetration testing purposes. It covers using JavaScript to parse HTML pages extracted from cross-site requests. Parsing HTML with JavaScript is useful for penetration testing as it allows extracting tokens from pages and traversing applications for cross-site scripting in a more programmatic way than manual analysis. The document is presented by Vivek Ramachandran and is part of a training from SecurityTube.net on using JavaScript for tasks like HTML parsing that are common in penetration testing.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    16 views5 pages

    Javascript For Pentesters

    Uploaded by

    John Stuart
    This document discusses using JavaScript for penetration testing purposes. It covers using JavaScript to parse HTML pages extracted from cross-site requests. Parsing HTML with JavaScript is useful for penetration testing as it allows extracting tokens from pages and traversing applications for cross-site scripting in a more programmatic way than manual analysis. The document is presented by Vivek Ramachandran and is part of a training from SecurityTube.net on using JavaScript for tasks like HTML parsing that are common in penetration testing.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    of 5

    Javascript

     for  Pentesters  

    Vivek  Ramachandran  
    SWSE,  SMFE,  SPSE,  SISE,  SLAE,  SGDE  Course  Instructor  

    CerCficaCons:                          hFp://www.securitytube-­‐training.com    
     
    Pentester  Academy:    hFp://www.PentesterAcademy.com    

    ©SecurityTube.net  
    XHR  and  HTML  Parsing  

    ©SecurityTube.net  
    Why  HTML  Parsing?  

    • XSS  can  be  used  to  traverse  the  applicaCon  

    • HTML  Pages  might  need  to  be  processed  


    – extract  tokens  

    • Text  based  treatment  is  painful  

    • DOM  based  Parsing  is  required  

    ©SecurityTube.net  
    HTML  in  XHR  

    hFps://developer.mozilla.org/en-­‐US/docs/HTML_in_XMLHFpRequest    
    ©SecurityTube.net  
    Pentester  Academy  

    ©SecurityTube.net  

    You might also like