Vulnerabilities 30
- Reflected XSS with Event Handlers and href Attributes Blocked
- Reflected XSS in a JavaScript URL with Some Characters Blocked
- Reflected XSS Protected by Very Strict CSP with Dangling Markup Attack
- Reflected XSS Protected by CSP with CSP Bypass
- XSS To Bypass CSRF Defenses
- Team - TryHackMe Writeup
- Exploiting XSS to Capture Passwords
- Lab - Exploiting XSS to Steal Cookies
- Reflected XSS into a Template Literal with Quotes and Backticks Unicode-Escaped
- Stored XSS into onclick Event with Angle Brackets and Double Quotes HTML-Encoded
- Reflected XSS into a JavaScript String with Angle Brackets and Double Quotes HTML-Encoded and Single Quotes Escaped
- Reflected XSS into a JavaScript String with Single Quote and Backslash Escaped
- Reflected XSS in a Canonical Link Tag
- Lab - Reflected XSS with some SVG markup allowed
- Lab - Reflected XSS into HTML context with all tags blocked except custom ones
- Stored DOM XSS
- Reflected XSS into HTML context with most tags and attributes blocked
- Stored XSS into anchor href attribute with double quotes HTML-encoded
- Reflected XSS into attribute with angle brackets HTML-encoded
- Reflected XSS into a JavaScript string with angle brackets HTML encoded
- Reflected DOM XSS
- DOM XSS in jQuery selector sink using a hashchange event
- DOM XSS in document.write sink using source location.search inside a select element
- DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encoded
- Stored XSS into HTML context with nothing encoded
- DOM XSS in jQuery anchor href attribute sink using location.search source
- DOM XSS in innerHTML sink using source location.search
- DOM XSS in document.write sink using source location.search
- Reflected XSS into HTML context with nothing encoded
- XSS:From Browser Parsing to Exploitation