JavaScript Validation Bypass

Overview Javascript Validation Bypass is usually trivial since the user may disable Javascript entirely or fill in values which legitimately pass validation then alter those values in a client proxy such as Burp Suite after the validation has occured. Discovery Methodology Set up a client proxy to capture all requests. Observe if validation occurs prior to the request being captured. If so, the validation is occuring in the browser. Exploitation Disable Javascript entirely and observe if the page still operates. Alternatively fill in values which legitimately pass client-side validation then alter those values in a client proxy such as Burp Suite after the validation has occured. Videos Warning: Could not reach YouTube via network connection. Failed to embed video. Click here to watch Two Methods to Bypass JavaScript Validation Warning: Could not reach YouTube via network connection. Failed to embed video. Click here to watch XSS bypassing JavaScript Validation Warning: Could not reach YouTube via network connection. Failed to embed video. Click here to watch How to Bypass Maxlength Restrictions on HTML Input Fields