1. How XSS Works and Several Common Attack Types An XSS attack is an attack that executes malicious scripts to steal a user’s login state, hijack a session, and so on. The input sources for malicious scripts include Cookies, Post forms, Get requests, HTTP header content, and more. We usually call a code fragment used for an XSS attack an XSS vector.

1. Introduction Flask was born in 2010 and is a lightweight Web application framework written in Python. Flask depends on two libraries. Jinja2, a template engine similar to mako Werkzeug, a Python library that follows the WSGI protocol and implements much of what sits underneath a Web framework, such as the request and response objects.

1. server_name Has No Effect Symptom: Nginx reverse-proxies two applications, and the configuration details are as follows. It turned out that requests to b.chenshaowen.com and a.chenshaowen.com both returned responses from service A. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 server

1. Introduction to Burpsuite Burp Suite is an integrated platform for attacking web applications. It contains many tools and designs many interfaces for those tools, in order to speed up the process of attacking an application. All the tools share one powerful, extensible framework that can handle and display HTTP