Leunam's PortSwigger
search
⌘Ctrlk
Leunam's PortSwigger
  • 01 SQL Injection
  • 02 Cross-site scripting
    • 03 Lab: DOM XSS in document.write sink using source location.search inside a select element
    • 04 Lab: DOM XSS in innerHTML sink using source location.search
    • 06 Lab: DOM XSS in jQuery selector sink using a hashchange event
    • 07 Lab: Reflected XSS into attribute with angle brackets HTML-encoded
    • 08 Lab: Stored XSS into anchor href attribute with double quotes HTML-encoded
    • 09 Lab: Reflected XSS into a JavaScript string with angle brackets HTML encoded
    • 22 Lab: Exploiting cross-site scripting to steal cookies
    • 24 Lab: Exploiting XSS to bypass CSRF defenses
  • 03 CSRF
  • 04 Clickjacking
  • 06 CORS
  • 10 OS Comand Injection
  • 12 Path traversal
  • 13 Access Control Vulnerability
  • 14 Authentication
  • 15 WebSockets
  • 16 Web cache deception
  • 20 HTTP Host header attacks
  • 22 File Upload vulnerabilities
  • 28 NoSQL Injection
  • 29 API Testing
gitbookPowered by GitBook
block-quoteOn this pagechevron-down

02 Cross-site scripting

03 Lab: DOM XSS in document.write sink using source location.search inside a select elementchevron-right04 Lab: DOM XSS in innerHTML sink using source location.searchchevron-right06 Lab: DOM XSS in jQuery selector sink using a hashchange eventchevron-right07 Lab: Reflected XSS into attribute with angle brackets HTML-encodedchevron-right08 Lab: Stored XSS into anchor href attribute with double quotes HTML-encodedchevron-right09 Lab: Reflected XSS into a JavaScript string with angle brackets HTML encodedchevron-right22 Lab: Exploiting cross-site scripting to steal cookieschevron-right24 Lab: Exploiting XSS to bypass CSRF defenseschevron-right
Previous14 Lab: Blind SQL injection with time delayschevron-leftNext03 Lab: DOM XSS in document.write sink using source location.search inside a select elementchevron-right

Last updated 1 year ago