1. Diff Between CSRF and SSRF. 2. Types of XSS 3. DOM 4. XSS 5. IDOR

Question

Accepted Answer

CSRF is a type of attack where unauthorized commands are transmitted from a user that the web application trusts. SSRF is a type of attack where an attacker can send a crafted request from a vulnerable web application.

CSRF stands for Cross-Site Request Forgery, while SSRF stands for Server-Side Request Forgery.
CSRF involves tricking a user into making a request they did not intend to, while SSRF involves an attacker sending a crafted request from a vulnerable web application.
Types of XSS include Stored XSS, Reflected XSS, and DOM-based XSS.
DOM stands for Document Object Model, which represents the structure of a web page as a tree of objects.
XSS stands for Cross-Site Scripting, a type of vulnerability where attackers inject malicious scripts into web pages viewed by other users.
IDOR stands for Insecure Direct Object Reference, a vulnerability where an attacker can access unauthorized data by manipulating object references.