https://sudonull.com/web-application-vulnerabilities-xss-sqli-enumeration
Breakdown of top-3 vulnerabilities in web: user enumeration, XSS, SQL injections. Fix methods for developers: prepared statements, encoding. In-depth pentest guide.
Search Articles — Sudonull
Search Results
In this project
https://sudonull.com/htb-stacked-xss-and-docker-escape-walkthrough
Detailed walkthrough of the Stacked machine on Hack The Box: nmap reconnaissance, vhost ffuf, XSS in Referer, base64-proxy mail.stacked.htb. Master RCE and container escape. Read the guide for pentesters.
https://sudonull.com/joomla-6-0-4-updates-security-patches
Learn about fixes for SQL injections, XSS, and ACL in Joomla 6.0.4 and 5.4.4. Details of vulnerabilities, admin bugs, and update instructions for developers. Update now.
From the web
Cross Site Scripting (XSS) - OWASP Foundation
https://owasp.org/www-community/attacks/xss/
Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur when an attacker uses a web application …
What is cross-site scripting (XSS) and how to prevent it? | Web ...
https://portswigger.net/web-security/cross-site-scripting
Cross-site scripting (also known as XSS) is a web security vulnerability that allows an attacker to compromise the interactions that users have with a vulnerable application. It allows an attacker to …
What is Cross Site Scripting (XSS) - GeeksforGeeks
https://www.geeksforgeeks.org/ethical-hacking/what-is-cross-site-scripting-xss/
Nov 25, 2025 · Cross-Site Scripting (XSS) is a vulnerability in a web application that allows a third party to execute a script in the user's browser on behalf of the web application.
Cross-site scripting - Wikipedia
https://en.wikipedia.org/wiki/Cross-site_scripting
XSS attacks enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same …
Cross-site scripting (XSS) - Security | MDN - MDN Web Docs
https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/XSS
Dec 15, 2025 · A cross-site scripting (XSS) attack is one in which an attacker is able to get a target site to execute malicious code as though it was part of the website.
Cross-site scripting (XSS) cheat sheet - PortSwigger
https://portswigger.net/web-security/cross-site-scripting/cheat-sheet
May 22, 2026 · Interactive cross-site scripting (XSS) cheat sheet for 2026, brought to you by PortSwigger. Actively maintained, and regularly updated with new vectors.
XSS Explained: A Complete Guide to Cross-Site Scripting with Practical ...
https://medium.com/@mazene432/xss-explained-a-complete-guide-to-cross-site-scripting-with-practical-examples-80453349b35f
Blind XSS is a type of Cross-Site Scripting (XSS) vulnerability where the attacker injects malicious code into a website or application, but cannot see the immediate result or effect of this...
XSS - TryHackMe
https://tryhackme.com/room/axss
We are concerned with fixing stored XSS vulnerabilities. We need to ensure that no malicious scripts are saved in the database; furthermore, we will escape any content before displaying it as HTML.
GitHub - devspidr/XSS_payloads_list: A curated list of common and ...
https://github.com/devspidr/XSS_payloads_list
A curated list of common and advanced Cross-Site Scripting (XSS) payloads for penetration testing, bug bounty hunting, and web application security research. Useful for learning, practicing, and au...
Cross-Site Scripting (XSS) Testing: XSS Alert Example
https://www.softwaretestinghelp.com/cross-site-scripting-xss-attack-test/
May 9, 2025 · A Complete Guide to Cross-Site Scripting (XSS) Attack, how to prevent it, and XSS testing.
Trending Now
How to Write a SQL Query: Tutorial with Examples
Learn how to write a SQL query with practical examples. Master SELECT, WHERE, JOIN, GROUP BY, and best practices for readable, efficient SQL. Start now.
What Is Infrastructure as Code? Benefits, Tools & Best Practices
Learn what is infrastructure as code and why use it. Discover key benefits, essential tools, and best practices to automate and secure your cloud infrastructure.
How Kubernetes Manages Container Scaling and Load Balancing
Learn how does kubernetes manage container scaling and load balancing with HPA, cluster autoscaler, and service mesh. Master production-grade autoscaling and traffic distribution.
How to Reduce Hallucination in LLMs: 7 Proven Techniques
Learn how to reduce hallucination in LLMs with 7 proven techniques from peer-reviewed research. Boost accuracy and reliability in your AI applications today.
Starlink Launch in Japan: Direct Smartphone Communication via Satellite
SpaceX and KDDI launched satellite communication for smartphones in Japan. Learn how Starlink Direct-to-Cell works, who can access it, and what hidden geopolitical goals this project pursues.
Kubernetes Architecture Explained with Examples | Guide
Kubernetes architecture explained with examples: understand control plane, worker nodes, Pods, and deployment flow. Learn how clusters work with practical use cases.
How to Use Terraform with AWS: Complete Guide
Learn how to use Terraform with AWS step by step. Master provider setup, state management, security, and production-grade deployments. Start building today.
How to Implement JWT Authentication: Step-by-Step Guide
Learn how to implement JWT authentication securely in your web API. This complete guide covers token issuance, validation, best practices, and production security.
What Is a Large Language Model? Beginner's Guide
Learn what is a large language model, how AI like ChatGPT works, key capabilities, limitations, and practical uses. Understand LLMs in plain English.
How to Deploy LLM in Production: Step-by-Step Guide
Learn how to deploy LLM in production with this step-by-step guide. Covers model selection, Kubernetes deployment, vLLM, testing, and monitoring for reliable AI systems.