XSS platform construction for web security attack and defense

  • XSS testing platform: It is mainly used to receive cookies obtained from testing XSS, or hosting exp (may need to use this platform when playing CTF.
  • XSS game: A game with XSS vulnerabilities, used to train XSS technology.

It is not recommended to build it by yourself. It is recommended to use the https://xs.sb/ platform. I set up locally and can only receive my own cookies, which is of little use.

If you build it yourself, you need to prepare:

  • An available domain name (the shorter the better);
  • If you need to test an HTTPS website, please prepare an SSL certificate (free SSL certificates can be obtained from Cloudflare or Let's Encrypt);

That is troublesome and difficult to maintain (I'm lazy, run away

Guess you like

Origin blog.csdn.net/qq_43085611/article/details/113180199