![]() |
|
RaccoonCity's XSS Handbook - Printable Version +- Sinisterly (https://sinister.ly) +-- Forum: Hacking (https://sinister.ly/Forum-Hacking) +--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials) +--- Thread: RaccoonCity's XSS Handbook (/Thread-RaccoonCity-s-XSS-Handbook) |
RE: RaccoonCity's XSS Handbook - oxgen1 - 08-11-2014 Awesome, very good and noob friendly (it helps me). Lots of information RE: RaccoonCity's XSS Handbook - Eleven - 08-12-2014 Awesome thread like always @'RaccoonCity' .Great handbook, I would like to see more like these in the future! RE: RaccoonCity's XSS Handbook - BlueCat - 08-12-2014 @'RaccoonCity' What the? Where do I even start? What a great thread....... RE: RaccoonCity's XSS Handbook - h3r0 - 08-12-2014 This was great! Great tutorial, great examples, great everything. Most people forget about explaining how one should try to modify any existing string that you can as well as completing html... like URL: example.com/index.php?next_page=2.php <a href="2.php">Next</a> XSS: example.com/index.php?next_page=">.</a><script>alert('xss');</script><!-- <a href="">.</a><script>alert('xss');</script><!-- ">Next</a> Of course you could always just XSS: example.com/index.php?next_page=javascript: alert('xss'); I think this should be a pinned thread IMO RE: RaccoonCity's XSS Handbook - Spirit - 08-17-2014 I agree, @h3r0. Sticky request granted. |