How To Perform A Basic XSS-CSS Script Attack!

We are not teaching you the advanced side of this attack, we'll leave that part to you.

Before you begin reading this, please understand that we aren't endorsing the use of hacking for malicious activities. Neither are we endorsing simple merriment. Hacking attacks can be used for good and have been used so in the past, which is the only reason for this article. Please note, hacking is good, cracking is criminal. An XSS-CSS script attack is a common form of hacking used by many. While their are many advanced methods of doing this, in its simplest form, this kind of attack is a matter of changing an URL. So, here's the most basic form of an XSS-CSS script attack.

1. The first step to hacking a website is to find one that you can hack using the XSS-CSS script. Here's an example website,

Example: http://www.mobilestores.com

Browse around on the website and see if you find URLs like the following,

http://www.xyz.com/search.php?mobileid=g123

2. This means that the website takes inputs from the URL, meaning that you can change it and hack into the website.

http://www.xyz.com/search.php?mobileid=Sony Xperia

3. Now you see the 'Sony Xperia at the end of the URL? This is your way in. Search on Google for XSS-CSS scripts and you will find lots.

Here are some examples.





Replace the word 'Sony Xperia' with the script that you picked from Google.

http://www.xyz.com/search.php?mobileid=

When you open this URL, it will show a dialogue box saying, "I Wanna Hack You."

4. Instead of this script, you can use one that asks for username and password. This would show up a login and password screen. If you send this to a user, he or she will insert their login name and password, which would in turn give you access to the website.

Contratulations! You now know how to do a very very basic XSS-CSS script attacks on a website.