https://sudonull.com/web-application-vulnerabilities-xss-sqli-enumeration
Breakdown of top-3 vulnerabilities in web: user enumeration, XSS, SQL injections. Fix methods for developers: prepared statements, encoding. In-depth pentest guide.
Search Articles — Sudonull
Search Results
In this project
https://sudonull.com/htb-stacked-xss-and-docker-escape-walkthrough
Detailed walkthrough of the Stacked machine on Hack The Box: nmap reconnaissance, vhost ffuf, XSS in Referer, base64-proxy mail.stacked.htb. Master RCE and container escape. Read the guide for pentesters.
https://sudonull.com/joomla-6-0-4-updates-security-patches
Learn about fixes for SQL injections, XSS, and ACL in Joomla 6.0.4 and 5.4.4. Details of vulnerabilities, admin bugs, and update instructions for developers. Update now.
From the web
Cross Site Scripting (XSS) - OWASP Foundation
https://owasp.org/www-community/attacks/xss/
Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur when an attacker uses a web application …
What is cross-site scripting (XSS) and how to prevent it? | Web ...
https://portswigger.net/web-security/cross-site-scripting
Cross-site scripting (also known as XSS) is a web security vulnerability that allows an attacker to compromise the interactions that users have with a vulnerable application. It allows an attacker to …
What is Cross Site Scripting (XSS) - GeeksforGeeks
https://www.geeksforgeeks.org/ethical-hacking/what-is-cross-site-scripting-xss/
Nov 25, 2025 · Cross-Site Scripting (XSS) is a vulnerability in a web application that allows a third party to execute a script in the user's browser on behalf of the web application.
Cross-site scripting - Wikipedia
https://en.wikipedia.org/wiki/Cross-site_scripting
XSS attacks enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same …
Cross-site scripting (XSS) - Security | MDN - MDN Web Docs
https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/XSS
Dec 15, 2025 · A cross-site scripting (XSS) attack is one in which an attacker is able to get a target site to execute malicious code as though it was part of the website.
Cross-site scripting (XSS) cheat sheet - PortSwigger
https://portswigger.net/web-security/cross-site-scripting/cheat-sheet
May 22, 2026 · Interactive cross-site scripting (XSS) cheat sheet for 2026, brought to you by PortSwigger. Actively maintained, and regularly updated with new vectors.
XSS Explained: A Complete Guide to Cross-Site Scripting with Practical ...
https://medium.com/@mazene432/xss-explained-a-complete-guide-to-cross-site-scripting-with-practical-examples-80453349b35f
Blind XSS is a type of Cross-Site Scripting (XSS) vulnerability where the attacker injects malicious code into a website or application, but cannot see the immediate result or effect of this...
XSS - TryHackMe
https://tryhackme.com/room/axss
We are concerned with fixing stored XSS vulnerabilities. We need to ensure that no malicious scripts are saved in the database; furthermore, we will escape any content before displaying it as HTML.
GitHub - devspidr/XSS_payloads_list: A curated list of common and ...
https://github.com/devspidr/XSS_payloads_list
A curated list of common and advanced Cross-Site Scripting (XSS) payloads for penetration testing, bug bounty hunting, and web application security research. Useful for learning, practicing, and au...
Cross-Site Scripting (XSS) Testing: XSS Alert Example
https://www.softwaretestinghelp.com/cross-site-scripting-xss-attack-test/
May 9, 2025 · A Complete Guide to Cross-Site Scripting (XSS) Attack, how to prevent it, and XSS testing.
Trending Now
How to Deploy LLM in Production: Step-by-Step Guide
Learn how to deploy LLM in production with this step-by-step guide. Covers model selection, Kubernetes deployment, vLLM, testing, and monitoring for reliable AI systems.
How to Implement JWT Authentication: Step-by-Step Guide
Learn how to implement JWT authentication securely in your web API. This complete guide covers token issuance, validation, best practices, and production security.
Google Gemini Ultra 2.0: record performance and price
Google introduced Gemini Ultra 2.0 with a context of up to 10 million tokens, surpassing GPT-5. Learn about the breakthrough architecture, price of $0.0005, and impact on the AI market. Read the full analysis.
what is the difference between vpn and proxy: Key Privacy Tips
Learn what is the difference between vpn and proxy, from encryption to scope. Discover which tool fits your privacy needs with our expert comparison.
What Are Data Structures and Why They Matter | Basics
Learn what are data structures and why they are important for efficient software. Discover types, real-world impact, and how they shape modern computing.
How to Learn Python for Beginners: Step-by-Step Roadmap
Discover how to learn Python for beginners with this step-by-step roadmap. Master fundamentals, data structures, and build real projects. Start your coding journey today.
MongoDB vs PostgreSQL When to Use Each: Key Differences
MongoDB vs PostgreSQL when to use each: compare ACID compliance, scalability, schema flexibility, and query power. Choose the right database for your project.
15 Prompt Engineering Best Practices for Better AI Results
Master prompt engineering best practices with 15 proven techniques. Learn to craft effective prompts, reduce errors, and get better AI results. Start optimizing now.
Fine Tuning vs Retrieval Augmented Generation: A Guide
Compare fine tuning vs retrieval augmented generation for LLMs. Learn which approach suits your AI project based on accuracy, cost, and data freshness.
Breakthrough in Quantum Error Correction: Google and Quantinuum
Google and Quantinuum have reached the threshold of scalable quantum error correction. Learn how this changes the future of quantum computing and who benefits from the breakthrough.