Exploiting XSS to bypass CSRF defenses
Laboratorio de Portswigger sobre XSS
Justice-Reaper
Exploiting cross-site scripting to capture passwords
Laboratorio de Portswigger sobre XSS
Exploiting cross-site scripting to steal cookies
Laboratorio de Portswigger sobre XSS
Reflected XSS into a template literal with angle brackets, single, double quotes, backslash and backticks Unicode-escaped
Laboratorio de Portswigger sobre XSS
Stored XSS into onclick event with angle brackets and double quotes HTML-encoded and single quotes and backslash escaped
Laboratorio de Portswigger sobre XSS
Reflected XSS into a JavaScript string with angle brackets and double quotes HTML-encoded and single quotes escaped
Laboratorio de Portswigger sobre XSS
Reflected XSS into a JavaScript string with single quote and backslash escaped
Laboratorio de Portswigger sobre XSS
Reflected XSS in canonical link tag
Laboratorio de Portswigger sobre XSS
Reflected XSS with some SVG markup allowed
Laboratorio de Portswigger sobre XSS
Reflected XSS into HTML context with all tags blocked except custom ones
Laboratorio de Portswigger sobre XSS