XSS cheat sheet di PortSwigger

Pochi giorni fa è stata pubblicata la nuova versione di XSS cheat sheet aggiornata al 14 gennaio 2020. In questa nuova versione ho partecipato inserendo un'intera e nuova sezione dedicata a "WAF Bypass" sfruttando JavaScript global object.

Looking at the Portswigger Burp Suite Certification - Y-Security GmbH

Cross-site scripting - PortSwigger

XSS Part 1 – Agung Suwandaru's Blog

XSS (Cross Site Scripting) - HackTricks

MobSTer: A model‐based security testing framework for web applications - Peroli - 2018 - Software Testing, Verification and Reliability - Wiley Online Library

can't even do level 2 : r/xss

Burp Suite Cheat Sheet v1.0 - OFFENSIVE OPERATIONS - SANS

their platform or web sites. These frameworks

What is cross-site scripting (XSS) and how to prevent it?

Cross-Site Scripting (XSS) Cheat Sheet 2020, PDF, Html Element

Cross-Site Scripting (XSS) Cheat Sheet - 2023 Edition

Cross-Site Scripting (XSS) Lab 5 : Exploiting XSS to perform CSRF