LESSON 55: Cross Site Scripting XSS in DVWA, Kali & VirtualBox - Reflected XSS Attack

Welcome to Day 55 of the 100 Days of Cybersecurity Challenge with Victor Akinode.

In this lesson, we perform our first Cross-Site Scripting (XSS) attack using Damn Vulnerable Web Application running on Kali Linux.

Cross-Site Scripting (XSS) is one of the most common web vulnerabilities and a core topic in the OWASP Top 10. It allows attackers to inject malicious JavaScript into web pages that run in the victim’s browser.

When exploited, XSS can allow attackers to:

• Steal session cookies
• Hijack user sessions
• Deface websites
• Create fake login forms (phishing)
• Perform actions on behalf of the victim

In this lab, we demonstrate Reflected XSS, where malicious JavaScript is injected through a URL or form input and executed immediately in the browser.

You will see exactly how attackers exploit this vulnerability and why proper input validation and output encoding are essential for web security.

What You’ll Learn

• What Cross-Site Scripting (XSS) is
• The difference between Reflected, Stored, and DOM XSS
• How reflected XSS attacks work
• Injecting malicious JavaScript into a vulnerable page
• How attackers steal session cookies
• Why sanitizing user input is critical

By the end of this lesson, you will understand how XSS attacks work and why developers must sanitize and encode output using secure coding practices such as htmlspecialchars() or framework-based protections.

If you are following the 100 Days of Cybersecurity Challenge, watch this lesson after Day 54: SQL Injection on Medium Security.

Subscribe and turn on notifications to continue the series.

See you in the next lesson.

🧪 Lab Setup

Access DVWA:

http://localhost/DVWA

Default credentials:

Username: admin
Password: password

Configuration:

• Security level: Low
• Navigate to XSS (Reflected) module

#cybersecurity
#xss
#crosssitescripting
#dvwa
#ethicalhacking
#websecurity
#javascript
#kalilinux
#owasp
#100daysofcybersecurity

Видео LESSON 55: Cross Site Scripting XSS in DVWA, Kali & VirtualBox - Reflected XSS Attack канала Victor Akinode