XSS (cross-site scripting) is an attack in which someone injects malicious code into a legitimate web page, for example in a comment or a form, so it runs in other visitors' browsers. It can steal sessions, redirect people to fake sites or change what the user sees, and it is prevented by validating and sanitizing everything the site receives.
How TecnetOne handles it: Penetration Testing
cross-site scripting, reflected XSS, stored XSS, DOM XSS
Related terms
RCE (remote code execution)
RCE (remote code execution) is a type of vulnerability that lets an attacker run their own commands on a server or device from a distance, without physical access or credentials. It is among the most serious flaws because it usually gives full control of the system, which is why patches that fix it should be applied right away.
Tailgating and piggybacking
Tailgating is a social engineering technique in which an unauthorized person enters a restricted area by closely following someone who has access, for example slipping in behind an employee who badges through a door. When the employee knowingly lets them in out of courtesy, it is called piggybacking.
SIM swapping
SIM swapping is a fraud in which a criminal persuades or tricks the phone carrier into moving your number to a SIM card they control. They then receive your calls and SMS codes and can break into your bank or work accounts, which is why authenticator apps or passkeys are safer than SMS.
Attack vector
An attack vector is the path or method an attacker uses to get into a system, such as a phishing email, a stolen password, an unpatched vulnerability or an infected USB drive. All the possible vectors together make up the attack surface, and reducing them is one of the core jobs of cybersecurity.
Pharming
Pharming is an attack that sends people to a fake website even when they type the correct address of the real one, by tampering with DNS or the device's settings. Unlike phishing, it does not need the victim to click a deceptive link, which makes it harder to notice.
Ready to put this into practice in your operation?
Tell us what you need and a TecnetOne engineer will get back to you.
Talk to an engineerTalk to an engineer
Tell us what you need and we’ll reply the same business day.