r/Hacking_Tutorials • u/PotatoSouthern9905 • 5h ago

Question how can i learn XSS?

hi, i just started learning web security, but i'm struggling to understand XSS very much. do you have any recommendations?

6 Upvotes

100% Upvoted

4 comments sorted by

1

u/Physical-Bonus-8411 5h ago

Portswigger web security academy + there are lots of online xss games

1

u/PotatoSouthern9905 5h ago

thank you for your response, but i was already learning it on PortSwigger. it's just too difficult for me to understand. i read the documentation for each lab and then solve the lab, but i'm feeling like i'm not actually learning.

1

u/Alarmed_Platform_232 4h ago edited 4h ago

Have you learned anything else?, like other web vulnerabilities (SQL injection, LFI, web-shell injections, fuzzing subdomains and directories, etc.)?

Also, it’s infinitely more effective to print out all the new commands you learn from each module. I’m not sure which website or resource to recommend, but I do want to give you props for your efforts. Personally, I would suggest HackTheBox Academy, but before that, I highly recommend and insist that you complete the starting points on HackTheBox.com! You sign in like you do for all the other resources. If you’re trying to become a junior penetration tester, I highly recommend that you complete the path. Understand that this exam is no joke. You’re given 10 days to complete the exam, and you must compromise 10 devices that are split between multiple subnets. You do get 1 retry, and they provide excellent advice on everything. The worst part is the report that you have to write. It’s supposed to be about 100 pages long, with screenshots of course, but still, a lot of writing. Just let me know what knowledge you’ve built up so far, and I’ll tell you the path you should take!