Weaponizing self-xss - NetSPI

Maybe you’re a web app pentester who gets frustrated with finding self-xss on sites you test, or maybe you’re a website owner who keeps rejecting self-xss as a valid vulnerability. This post is intended to help both understand the risk involved in self-xss and how it can possibly be used against other users. So what […]

Web Application Penetration Testing - NetSPI

Weaponizing Reflected XSS to Account Takeover

External Network Pentesting & Attack Surface Management

Web Application Penetration Testing - NetSPI

Turning Self-XSS into non-Self Stored-XSS via Authorization Issue

Turning Self-XSS into non-Self Stored-XSS via Authorization Issue

GitHub - dli408097/WebSecurity

What Is Persistent XSS

Weaponizing self-xss - NetSPI

Weaponizing Reflected XSS to Account Takeover

TrustedSec Tricks for Weaponizing XSS