SSD Lil' Bits - Episode 6 - Roundcube Webmail: Stored XSS Attack Demo

A demonstration of a stored cross-site scripting vulnerability and attack walkthrough on the Roundcube Webmail client.

Knowledge is power! Learn cybersecurity with SSD. Keep up with the latest updates: ssd-disclosure.com/​ twitter.com/SecuriTeam_SSD​ facebook.com/ssdsecuredisclosure linkedin.com/company/ssd-disclosure SSD Lil’ Bits is a collection of introductory cybersecurity lessons from our very own in-house experts. In this episode, we continue to dive deeper into the technical details of XSS attacks and look into a stored XSS attack demonstration on the Roundcube Webmail client. Read the full Roundcube Webmail advisory: ssd-disclosure.com/ssd-advisory-roundcube-incoming-emails-st… cardaci.xyz/advisories/2020/07/21/roundcube-1.3.9-stored-xss… About SSD: SSD provides the quick handling needed to get zero-day vulnerabilities responsibly reported to vendors and be generously rewarded- all done discreetly. We help researchers get to the bottom of vulnerabilities affecting major operating systems, software, or devices and get the reward they deserve. More Lil' Bits: youtube.com/playlist?list=PLIMbmoMgiOietxlCl9HFPckZCPPZPPvmM Video demos courtesy of: youtube.com/watch?v=gbnBjeaB_e4&ab_channel=InMotionHosting youtube.com/watch?v=H-gnAN_qtjI&ab_channel=TechForceOnsite%2… Music: Places by Bloome is licensed under a Creative Commons License. soundcloud.com/bloomeofficial​ Support by RFM - NCM: bit.ly/2xGHypM​