Design and Implementation of web application penetration testing with Cross-site scripting (XSS)

In our daily lives, no single days we use Web Applications such as Gmail and YouTube. Without using Web Application, people cannot do their jobs and pay in restaurants. These applications are designed by various technologies like JavaScript, HTML, PHP and so on. However, as no system is perfect, Web Application includes vulnerabilities at the design level as well, which leads to security breaches and to steal users’ sensitive information. One of the famous Web Application vulnerabilities is Cross-site scripting (XSS). This paper discusses the implication of XSS, in a real case scenario to demonstrate how it deployed by hackers. This is followed by a discussion on awareness and mitigation technique to prevent users from becoming a victim of XSS attack on web applications.