Skip to main content
Back to course
Log in
Get started
Someone wanted to learn this too, so Grasp built them a personal learning path.
Create your own
Bug bounty hunter learning path
ยท
Module 7
Cross-Site Scripting (XSS)
1
Reflected XSS: Non-Persistent JavaScript Injection
Identify and exploit reflected XSS vulnerabilities by injecting non-persistent JavaScript into user inputs.
2
Stored XSS: Persistent Script Injection
Identify and exploit stored XSS by injecting persistent malicious scripts into application data.
3
Exploiting DOM-based XSS
Analyze client-side code to identify and exploit DOM-based XSS vulnerabilities.
4
Evading XSS Filters with Encoding and Obfuscation
Bypass common XSS filters and input sanitization using encoding, obfuscation, and event handlers.
5
XSS for Session Hijacking
Craft an XSS payload to steal a victim's session cookies and exfiltrate them to an attacker-controlled server.
6
XSS for CSRF: Unauthorized Actions
Craft an XSS payload to perform unauthorized actions on behalf of a victim user (CSRF via XSS).
7
CSRF Vulnerability Testing and Anti-CSRF Token Analysis
Test for Cross-Site Request Forgery (CSRF) vulnerabilities and analyze the effectiveness of anti-CSRF tokens.
8
Clickjacking: Understanding and Demonstrating its Impact
Identify and demonstrate the impact of clickjacking vulnerabilities.
Previous module
SQL Injection
Next module
Server-Side Injection & File Inclusion Attacks