PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

XSS attacks and exploitation: The ultimate guide to cross-site scripting

yeswehack.com | blog | #bug-bounty | #web-security | #xss | #exploitation | #cross-site-scripting | #csp
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Ultimate guide to XSS: impact and exploitation of reflected, stored, DOM and blind variants, plus detection workflows and defences including input validation, CSP, WAFs and secure cookie flags.
Published
Collected

Related coverage

vulnerability · bishopfox.com
Submit and Execute: Weaponizing Reflected XSS in Siemens Teamcenter's Login Redirect (CVE-2026-58113)
CVE-2026-58113 is a zero-interaction XSS in Siemens Teamcenter’s login redirect that let Bishop Fox silently reassign workflow delegation on a victim’s…
vulnerability · vercel.com
The Vercel Bug Bounty Program is now publicly available
Vercel's Bug Bounty Program is now public on HackerOne, covering all Vercel products and open-source projects. Learn how to participate and report findings.
vulnerability · vercel.com
The Vercel OSS Bug Bounty program is now available
Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
research · lab.ctbb.show
Exploiting Web Worker XSS with Blobs
Ways to turn XSS in a Web Worker into full XSS, covering known tricks and a new generic exploit using Blob URLs with the Drag and Drop API
blog · yeswehack.com
Nonce CSP bypass using disk cache, ‘quiet side channel’ for request smuggling, Amazon Q and the malicious pull request – ethical hacker news roundup
Roundup: Jorian Woltjer's nonce CSP bypass via bfcache and disk cache, d3d's trust-based HTTP smuggling C2 channel, Tracebit's Gemini CLI hijack, and the malicious Amazon Q pull request.
Back