3 |
4 |
5 |
6 | # Topics:
7 |
8 | > [XSS Related + Payload list](#--xss)
9 |
10 | > [SQLi Related + Payload list](#--sqli)
11 |
12 | > [cURL Related](#--curl-related)
13 |
14 | > [403 Bypassing](#--bypass-403-forbidden)
15 |
16 | > [Tools Related](#--tools)
17 |
18 | > [APIs](#--apis)
19 |
20 |
21 |
22 |
23 | # - XSS
24 | ● What is cross-site scripting (XSS)?
25 |
26 | Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script (JavaScript, etc), to a different end user. Flaws that allow these attacks to succeed are quite widespread and occur anywhere a web application uses input from a user within the output it generates without validating or encoding it. XSS can cause a variety of problems for the end user, that range in severity: from an annoyance, to complete account compromising.
27 | XSS attacks may be conducted without using `` html tags. Other html tags will do exactly the same thing, for example: `` or other html attributes such as: onmouseover, onerror, onload, etc... [(source)](https://owasp.org/www-community/attacks/xss/)
28 |
29 |
30 |
31 |
32 |
33 | > Do not use the following xss payloads in a random or unauthorized web application, I do not take any resposibility
34 | > to anyone willing to execute or exploit them on random endpoints and parameters, you have been warned!
35 |
36 | ## XSS Payloads (My personal collection)
37 |
38 |
39 | 🔴 Click to view my personal custom list of XSS Payloads
40 |
41 | ```
42 | --- Important Note ---
43 | --- Please do consider that these payloads are used not for fuzzing nor to be added to a wordlist, ---
44 | --- there are many payloads here that would need additional actions to properly work. ---
45 | --- But of course, if you do wish to add some of them to a wordlist, then there's no problem at all! ---
46 | --- I also add commentary about every/most of the payloads in the commit history --
47 |
48 |
30 |
31 |