display a different content of a website with XSS

[kryptolite]

Hello, I am not sure this is the right place to ask or not but I find it the most relevant compared to any other subforums.

I have this assignment to demonstrate simple XSS (cross site scripting). I have to craft an URL that would display a webpage, but some of its content has to be modified. I can't redirect it to a copy of that web page that has been modified, it has to link to the given website.

I have been looking for information in the past 90 minutes but none of the pages I found describes how to do this, they often talk about the more complex version of XSS

Anyone familiar with this?

[digital-ether]

Hello, I am not sure this is the right place to ask or not but I find it the most relevant compared to any other subforums.

I have this assignment to demonstrate simple XSS (cross site scripting). I have to craft an URL that would display a webpage, but some of its content has to be modified. I can't redirect it to a copy of that web page that has been modified, it has to link to the given website.

I have been looking for information in the past 90 minutes but none of the pages I found describes how to do this, they often talk about the more complex version of XSS

Anyone familiar with this?

You need to first create a webpage with an XSS vulnerability. This is any dynamic website that displays input from HTTP as is.

eg in PHP:

<?php 


echo $_GET['xss_me_please'];

?>

Now in your url you just pass anything to xss_me_please...

eg:

http://example.com/page.php?xss_me_please=this_is_xss<script>alert('hi');</script>

Its up to you to get creative with it and demonstrate something more realistic.