Watch how Hackers deface websites...

Check out Fing, an awesome network administration tool that lets you manage your network like a Pro! Get 25% off on the premium version using my link: bit.ly/3wOU6e1
In this video, I demonstrate how hackers deface websites with Stored Cross Site Scripting (XSS). Stored cross-site scripting arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way.
If you don't know what defacing is, it simply means maliciously changing the content of a website so that whenever any user goes to the website they see the content that has been put there by the hacker instead of the actual website.
The website that I used in this video is an open source web application that is built to be vulnerable to numerous vulnerabilities. I made some minor modifications to the app to help me perform my demonstration.
The modified docker image of the app can be found here: hub.docker.com...
DISCLAIMER: This video is intended only for educational purposes.
The experiments in this video are performed in a controlled
lab setup and not on a live target. The content is purely
from a penetration testing perspective. I do not
condone or encourage any illegal activities.
To setup this vulnerable app on your computer, install docker and execute these commands:
1. Pull the Image from docker hub:
docker pull tejaswaroop156/juice_shop_mod
2. Start the app
docker run -d -p 3000:3000 tejaswaroop156/juice_shop_mod
Join my Discord: / discord
Follow me on Instagram: / teja.techraj
Website: techraj156.com​​​​​
Blog: blog.techraj15...
Thanks for watching!
SUBSCRIBE for more videos!

[@mnageh-bo1mm]

man your videos are so clear and the music is just mwah

[@PappySupa]

Long time here. Best video ❤

[@ttgyanofficial]

Full video on this with full explanation

[@codeberry8230]

It is full video and all things all explained

[@leyashu0799]

Hello buddy, can you make a full course on website defacement please

[@opposite342]

1. I don't think this changes every part of the website. Just the url that linked to this user. I might be wrong here but that's how I interpreted this. Especially if the server rerenders thing on requests (Say with a templating engine). Then I don't see how this could pollute any code outside on this user's link.
2. The initial payload needs to be hosted, but once it's does its job, depending on whether the website backends rerenders the page on request or not, it might not needed to be continuously hosting. However, in most modern sites it most likely will still be rerendered. So you will have to continuously host the script.js somewhere.
Now, what's the point of this? Say if you have a site someone can donate to you via your user page. You can have a part of your bio be replacing the donate button to link to your own site - and then card stealing that way. (Literally 101 example of xss)

[@opposite342]

Essentially, the target user has to have the script run on their browser. If you search xss and then go to snyk's link on it, you'll even see that their example relied on you chatting a user and the script being passed onto that user's browser - which is the essentials needed for xss.

[@xXxMAKAR0VxXx]

Wow, you really intelligent and full of knowledge

[@arthatattvam7542]

Bro this changes only seen by us when we login with our credentials. How these changes become permanent to other user also

[@phillydee3592]

Just a question,did you just download a picture off the web and changed it to hacker.png and basically added that into your js file with the html script?

[@vlogsprasenjit]

Great Video 👍

[@mohitjain4943]

Have been watching you for years!

[@quelnan]

imagine if youtube had this problem
going into some video and theres some "HACKED!!!" page

[@girivasan4311]

Hi
How to install wordpress in subdirectory in aws

[@Arian-Ices]

How does fing block system work as it's doesn't access your router admin panel

[@saleemahmed8302]

So after injecting the payload how does a website get rid of the code? Because in real world scenarios this can cause a lot of damage.

[@polar.goat32o]

they probably clear the reviews and update the input sanitization

[@saleemahmed8302]

@polar.goat32o thanks

[@user-hq8wm8giyujcg]

Can i use social media by create account in them through being anonymous

[@Alfaz_Infosec]

Thanks❤

[@sayyidnaeemulhaquemayankak1627]

Super Videos .... ,Our Website Ship ticket booking ...but someone is ...blocked and booked all tickets ..then ....Pay a person with extra money...
How to block him from my PC?
I injected some JS to ...automate ....name ,password fill...but ..next button clicking not possible ....a captcha code occurs..how to disable ...the captcha verification...
If I can't get a ticket ..I am struck at Kerala...
I want to go to My Island 🏝️😢.
I am asking you for this because ...I need to go fast and take my ticket ..before the hacker is doing it ...can you please help ....

[@krivadnaaiservices]

How to host a file on the target website where we left the xss payload.. that's is where the defacement takes place...

[@Awesomium3]

he wont tell

[@user-hq8wm8giyujcg]

Im learning hacking, can u tell me what are the best pro hacking group i want to join

[@SCLEDONFF]

bro HTML page not showing why ??

[@beatboss8702]

How r u doing brother 😁💥

[@rockyforreal]

I think Bro wakeup from a coma

[@ttgyanofficial]

Another video on this topic

[@user-hq8wm8giyujcg]

Video on how to find someones phone number, address, email, password, ip address in the first place

[@IssacPichette]

you comment too much, and asking this seems more malicious, and i feel like any information you get from it means illegally hacking someone. don't so that is all I'm gonna day unless you want to get hit by the FBI

[@ra.njan_kr]

Good video ,need more ways to hack website... (For learning purposes)

[@ra.njan_kr]

Or if any resources or video ,just paste the link of that video or resources.. please

[@INDIANchhanel-ii7zz]

😂😂😂

[@TommyDoan_2011]

alert('XSS Attack!');

[@DynamicLights]

Educational purposes only 😂

[@gg-mr4qr]

😂😂

[@DynamicLights]

@@gg-mr4qr yep

[@Education-or2xb]

Education purpose 🤣🤣🤣

[@RajvirKumar-z3t]

Hi I

[@PARIKAKU]

Comeback

[@jokerhackr]

I want to make a script for a game, brother, I want to earn money. Tell me brother, will you help me?

[@jokerhackr]

how do i contact you

[@user-hq8wm8giyujcg]

How to hack and destroy systems

[@e-talian1245]

Yes

[@123_GAMER_7]

How​@@e-talian1245

[@RubinBastakoti]

HELLO

[@user-hq8wm8giyujcg]

How to hack social media companies and power my social media account so that no one cant block me and my post get popular and on top

[@e-talian1245]

It is because

[@MarshmelloGTAG]

alert(1)

[@The_offical_M]

Bro that not gonna work😂😂😂😂

[@boldiYeah]

make video how to email spoof happens