Skip to content

Types of XSS

#xss #dombased #reflectedxss #storedxss #portswigger

  • Reflected XSS, where the malicious script comes from the current HTTP request.
  • Stored XSS, where the malicious script comes from the website's database.
  • DOM-based XSS, where the vulnerability exists in client-side code rather than server-side code.
  • Reflected DOM XSS , when the server-side application processes data from a request and echoes the data in the response. A script on the page then processes the reflected data in an unsafe way, ultimately writing it to a dangerous sink.

Notas personales de seguridad ofensiva.