Shulou(Shulou.com)06/02 Report--

This article introduces the relevant knowledge of "what is the principle of reflective XSS attacks in web network security". In the operation of actual cases, many people will encounter such a dilemma, so let the editor lead you to learn how to deal with these situations. I hope you can read it carefully and be able to achieve something!

Reflexive XSS attack

The function of the page http://127.0.0.1/xss/xss1.php is to enter the content in the "input" form, click the "submit" button, and put the input into the "output" form. For example, when you enter "11" and click the "submit" button, "11" will be output to the "output" form, as shown in figure 68.

Figure 68 input parameters are output to the page

When visiting http://127.0.0.1/xss/xss1.php?xss_input_value=">

The HTML code output to the page becomes

">, as you can see, the entered double quotes close the double quotes of the value attribute, and the entered > closes the input tag. This HTML code has two tags, the tag and

Label, and

The role of the tag Jiushi allows the browser to display "/ xss/" in the pop-up box, as shown below.

XSS uses the output environment to construct the code to output our input string to the value attribute in input. Please enter the string you want to show, "what is the principle of the reflective XSS attack of web network security?" this is the end of the introduction. Thank you for reading. If you want to know more about the industry, you can follow the website, the editor will output more high-quality practical articles for you!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.