XSS is Cross Site Scripting. If you don’t know how XSS (Cross Site Scripting) works, this page probably won’t help you. This page is for people who already understand the basics of XSS attacks but want a deep understanding of the nuances regarding filter evasion. This page will also not show you how to mitigate XSS vectors or how to write the actual cookie/credential stealing/replay/session riding portion of the attack. It will simply show the underlying methodology and you can infer the rest. Also, please note this XSS page has been replicated by the OWASP 2.0 Guide in the Appendix section. However, because this is a living document I suggest you continue to use the site below to stay up to date.

XSS Cheat Sheet

Related Posts: On this day...

• Mortal Kombat Cosplay - 2011
• Top Gear Jeremy Drives a Reliant Robin - 2010
• Neon Elmhurst Hospital sign burns out appropriately - 2009
• The Dark Knight on its way to become the most pirated movie of 2008 - 2008
• Linux "Game System of Tomorrow" Ships in Two Weeks - 2008
• Linus Torvalds’ old company Transmeta acquired - 2008
• Boston College Will Stop Offering New Students E-Mail Accounts - 2008
• HOWTO: make mp3 files smaller - 2007
• You're Not Attractive - 2007