Cookie Stealing & CSRF Attacks Explained - TryHackMe What's Your Name (3 Methods)

Описание: 🔥 Learn how to exploit XSS vulnerabilities in web applications to steal cookies and bypass authentication in this complete TryHackMe walkthrough. I'll show you three different client-side attack techniques to compromise the "What's Your Name" room!

In this hands-on web application pentesting tutorial, you'll learn:

How to identify and exploit Cross-Site Scripting (XSS) vulnerabilities in registration forms
Cookie stealing techniques using malicious JavaScript payloads
Password change exploitation through XSS injection
Cross-Site Request Forgery (CSRF) attacks with Base64 encoding
Real-world enumeration with Nmap and directory brute-forcing
Three complete exploitation methods from recon to admin access

⏱️ Timestamps

00:00 Introduction
00:44 Enumeration
10:17 Flag 2.1
14:18 Flag 2.2
17:20 Flag 2.3

🔗 Resources & Further Reading

TryHackMe "What's Your Name" Room: https://tryhackme.com/room/whatsyourname

Full Web App Pentesting Playlist:    • TryHackMe - Web App Pentesting  

Written Blog Post with Payloads: https://www.hqphu.com/posts/tryhackme...

💡 This room is part of the TryHackMe Web Application Pentesting learning path - perfect for aspiring ethical hackers looking to master client-side attacks!

Don't forget to LIKE this video, SUBSCRIBE for weekly cybersecurity tutorials, and COMMENT with your questions or what TryHackMe room you'd like me to cover next!

#TryHackMe #XSS #WebAppPentesting #EthicalHacking #Cybersecurity #CSRF #InfoSec #BugBounty