DEV Community

Discussion on: What is Cross-site Scripting (XSS) ? Types of XSS!

Collapse
 
antogarand profile image
Antony Garand

Self XSS is when the only the victim can hack themselves, such as a XSS on their own profiles or reflected XSS which only they can trigger.

While executing alert in your console could technically be classified as a self xss, it's not a vulnerability on the server itself and is usually not worth considering.

Sources:

Thread Thread
 
amrelmohamady profile image
Amr Elmohamady

youtu.be/nTCDQ0UmFgE In the last of the video she explained self XSS which is not considered a type of xss

Thread Thread
 
amrelmohamady profile image
Amr Elmohamady

Also yes it not vulnerable in the server I didn't say that

Thread Thread
 
antogarand profile image
Antony Garand

Youtube video's aren't always right, especially in smaller variants of XSS like Self XSS.

If you look elsewhere for references, especially in bug disclosure and writeup, you'll see my definition used more often than not.

Here is how it can be exploited when chained with other vulnerabilities: medium.com/@Ch3ckM4te/self-xss-to-...

Also, while I strongly disagree with the content of your post as demonstrated in my first comment, hiding the comment locks down the discussion to only us, whereas if left as-is other members of the community could have contributed to the disscussion

Thread Thread
 
amrelmohamady profile image
Amr Elmohamady

Ok I read about self XSS the what's the benefits of it

Some comments have been hidden by the post's author - find out more