PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Our favourite community contributions to the XSS cheat sheet

portswigger.net | research | #xss | #community | #payloads | #cheat-sheet | #angularjs | #vuejs
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A rundown of the seven best community submissions to PortSwigger's XSS cheat sheet: shorter Vue and AngularJS vectors, the obscure onbeforeinput event, and a WAF-evading base64-encoded payload.
Published
Collected

Related coverage

research · portswigger.net
Documenting the impossible: Unexploitable XSS labs
The XSS cheat sheet gains an 'impossible labs' section: eight scenarios its researchers couldn't exploit, from 15-character length limits to blocked events, with a challenge to solve the impossible.
research · portswigger.net
Adapting AngularJS payloads to exploit real world applications
Gareth Heyes adapts AngularJS template-injection payloads to bypass real-world filters: lower-case conversion at Piwik and a no-quotes policy at Uber. Both flaws enabled account hijacking.
research · portswigger.net
XSS without HTML: Client-Side Template Injection with AngularJS
Gareth Heyes explains client-side template injection in AngularJS and presents a fresh sandbox escape affecting Angular 1.3.1+ and 1.4.0+, enabling XSS even when user input is HTML-encoded.
research · portswigger.net
New crazy payloads in the URL Validation Bypass Cheat Sheet
URL Validation Bypass Cheat Sheet adds IP formats — partial decimal, mixed encodings, IPv6 — and a userinfo payload that makes Spring misparse hosts, enabling SSRF and open redirect.
research · portswigger.net
Introducing the URL validation bypass cheat sheet
PortSwigger launches the URL Validation Bypass Cheat Sheet, consolidating payloads for SSRF, CORS misconfiguration and open redirect testing, with three contexts and Intruder-friendly wordlists.
research · portswigger.net
onwebkitplaybacktargetavailabilitychanged?! New exotic events in the XSS cheat sheet
The XSS cheat sheet adds exotic event vectors: Safari-only onwebkitplaybacktargetavailabilitychanged for audio/video, heavy-interaction onpointercancel and the widely usable autofocus attribute.
Back