Cross-Site Scripting: Exploitation

Read

The core material for this module. Where a guide goes deeper than needed, the relevant sections are highlighted.

• Mark Reflected XSS Exploitation as done
  Guide 5 min read

  Reflected XSS Exploitation

  Focus on #Cookie Theft #Session Hijacking #HttpOnly Cookie Bypass via XHR #External JavaScript Loading #Credential Capture via Fake Login Form #Confirming HttpOnly Status #Encoding Chains and Double Encoding #URL Shortening for Delivery
• Mark Stored XSS Exploitation as done
  Guide 9 min read

  Stored XSS Exploitation

  Focus on #Cookie Theft Payload #Fetch-Based Exfiltration #External JavaScript Loading #Keylogger Payload #Simple Per-Key Keylogger #Batched Keylogger #CSP Bypass via JSONP #Chaining XSS with CSRF
• Mark DOM-Based XSS Exploitation as done
  Guide 5 min read

  DOM-Based XSS Exploitation

  Focus on #Hash-Based Payloads #postMessage Exploitation #Origin Validation Bypasses #Client-Side Routing Abuse #React Router #Angular Router #Vue Router #Bypassing Client-Side Sanitization #DOMPurify Misconfiguration #Mutation XSS (mXSS) #Prototype Pollution to Disable Sanitizers #Cookie Theft and Session Hijacking
• Mark JavaScript for XSS as done
  Guide 4 min read

  JavaScript for XSS

  Focus on #JavaScript APIs for Exfiltration #Cookie Theft #Session Token and localStorage Theft #Exfiltrating Page Content #Making Authenticated Requests on Behalf of the Victim #Loading an External Payload #Content Security Policy Considerations
• Mark XSS Filter Bypass as done
  Guide 2 min read

  XSS Filter Bypass

  Focus on #Tag and Event Handler Alternatives #Attribute Injection #JavaScript Context Escapes #Encoding Tricks #HTML Entity Encoding #Unicode Escapes #URL Encoding and Double Encoding #Null Byte Injection #Case Variation and Concatenation #Polyglot Payloads #WAF-Specific Bypasses #HTTP Parameter Pollution #Content-Type Mismatch #Request Method Switching

Practice

Apply the module hands-on.