| http://www.w3.org/ns/prov#value | - He records all the responses from the server that include unmodified versions of his script.The attacker tries also to inject extra-parameter to the HTTP request to see if they are reflected back in the web page or in the HTTP response.Attack Step TechniquesIDAttack Step Technique DescriptionEnvironments1Manually inject various script payloads into each identified entry point using a list of commo
|
