{"id":26327528,"url":"https://github.com/priyabug/cross-site-scripting-simulation-elgg","last_synced_at":"2026-01-01T21:59:56.831Z","repository":{"id":253368496,"uuid":"843297536","full_name":"Priyabug/Cross-Site-Scripting-Simulation-Elgg","owner":"Priyabug","description":"To protect web applications from XSS attacks simulations, detection techniques, and prevention strategies helping developers and security professionals understand and defend against XSS vulnerabilities.","archived":false,"fork":false,"pushed_at":"2025-02-21T01:23:44.000Z","size":13656,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-03-15T20:19:47.442Z","etag":null,"topics":["elgg-plugin","linux","ubuntu"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Priyabug.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-08-16T07:52:55.000Z","updated_at":"2025-02-21T01:25:14.000Z","dependencies_parsed_at":null,"dependency_job_id":"492b1452-0bbb-4e34-8ae5-a739be708ea5","html_url":"https://github.com/Priyabug/Cross-Site-Scripting-Simulation-Elgg","commit_stats":null,"previous_names":["priyabug/cross-site-scripting-simulation-elgg"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/Priyabug/Cross-Site-Scripting-Simulation-Elgg","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Priyabug%2FCross-Site-Scripting-Simulation-Elgg","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Priyabug%2FCross-Site-Scripting-Simulation-Elgg/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Priyabug%2FCross-Site-Scripting-Simulation-Elgg/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Priyabug%2FCross-Site-Scripting-Simulation-Elgg/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Priyabug","download_url":"https://codeload.github.com/Priyabug/Cross-Site-Scripting-Simulation-Elgg/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Priyabug%2FCross-Site-Scripting-Simulation-Elgg/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28164148,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2026-01-01T02:00:06.694Z","response_time":59,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["elgg-plugin","linux","ubuntu"],"created_at":"2025-03-15T20:19:49.934Z","updated_at":"2026-01-01T21:59:56.816Z","avatar_url":"https://github.com/Priyabug.png","language":"JavaScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003ch1\u003eCross Site Scripting Simulation Elgg\u003c/h1\u003e\n\n\n\n\u003ch2\u003eDescription\u003c/h2\u003e\n- \u003cb\u003eCross-site scripting (XSS) is a vulnerability often present in web applications that allows attackers to insert malicious code, such as JavaScript, into a victim's web browser. This malicious code enables attackers to \n   steal sensitive information, like session cookies, from users. The security mechanisms used by browsers, such as the same-origin policy, can be circumvented through XSS vulnerabilities.\u003c/br\u003e\n- \u003cb\u003eTo illustrate the potential of XSS attacks, we have set up a web application called Elgg in our pre-configured Ubuntu virtual machine. Elgg is a widely-used open-source platform for social networking, which includes \n   several countermeasures against XSS threats. However, for demonstration purposes, we have disabled these protections in our installation, making Elgg vulnerable to XSS attacks. Without these safeguards, users can post \n   any arbitrary content, including JavaScript code, to user profiles.\u003c/br\u003e\n- \u003cb\u003eIn this project, vulnerability is to conduct an XSS attack on the modified Elgg installation. The attack should mimic the infamous Samy worm created by Samy Kamkar, which affected MySpace in 2005. The objective of this \n   attack is to propagate an XSS worm among users so that anyone who views an infected profile becomes infected and automatically adds the attacker to their friend list.\u003c/br\u003e\n\n\u003cbr /\u003e\n\n![image](https://github.com/user-attachments/assets/a89db4c0-597d-4548-9251-f4f42cef8ce3)\n\n\n\n\u003ch2\u003eLanguages and Utilities Used\u003c/h2\u003e\n\n- \u003cb\u003ePython\u003c/b\u003e \n- \u003cb\u003eUbuntu 20.04 VM\u003c/b\u003e\n- \u003cb\u003eLinux \u003c/b\u003e\n\n\u003ch2\u003eEnvironments Used \u003c/h2\u003e\n\n- \u003cb\u003eWindows 10\u003c/b\u003e (21H2)\n\n\u003ch2\u003eProgram walk-through:\u003c/h2\u003e\n\n\u003cb\u003eTask 1\u003c/b\u003e: Posting a Malicious Message to Display an Alert Window\u003cbr\u003e\n\u003cb\u003eTask 2\u003c/b\u003e: Posting a Malicious Message to Display Cookies\u003cbr\u003e\n\u003cb\u003eTask 3\u003c/b\u003e: Stealing Cookies from the Victim’s Machine\u003cbr\u003e\n\u003cb\u003eTask 4\u003c/b\u003e: Becoming the Victim’s Friend\u003cbr\u003e\n\n\u003cembed src a href=\"https://drive.google.com/file/d/1uCxoX4KH4VHQnJwIdMl1H1Zu7jlkE_vg/view\" alt=\"\"\u003e\u003c/a\u003e \u003c/embed\u003e\n\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpriyabug%2Fcross-site-scripting-simulation-elgg","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fpriyabug%2Fcross-site-scripting-simulation-elgg","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpriyabug%2Fcross-site-scripting-simulation-elgg/lists"}