#1
We will analyze various levels of evasion and bypassing tactics for XSS payloads.

Cross-Site Scripting (XSS) attacks are a type of injection in which malicious scripts are injected into otherwise trustworthy websites. The flaws that allow these attacks to succeed are common and can be found whenever a web application accepts user input in its output without verifying or encoding it.
Many security researchers have created guides and cheat sheets to aid security professionals in the testing of Cross-Site Scripting problems over the years
In this book, we will not analyze the vectors reported in the cheat sheet one by one, but rather identify which of them are possible scenarios we may encounter and how to overcome them.
  [Image: smart.gif]

https://n3t-hunt3r.gitbook.io/pentest-book/