Biscuit's Bug Bounty Playbook
  • 👋Introduction to Biscuit's Bug Bounty Playbook
  • Mains
    • 🧾Resume For Cyber Security Freshie
    • 📗Browser extension
    • 📀POC Videos YT Channel
    • 📺55 YouTube Channels To Learn Hacking
    • 👀Hackers to Follow on Social Media
      • Twitter
      • Medium
      • YouTube
      • GitHub
      • Discord Server
      • Security GitBooks
    • 🏅Learn The Basics
      • 🎖️Type Of Cyber Security
      • 🥈Common Job Roles
      • 🥉Get Started With InfoSec
      • ⚕️Best Bug Bounty Platform
      • 🗞️Best InfoSec Writeups Website
      • 🍪Hacking Books
      • 🥂CLI Commands
      • 💿Learn WSL
    • 🧑‍💻Fun Programming Codes
    • 🔮Build your own Bug Bounty Methodology
    • 🎴Bug Bounty Checklist
  • Bug Bounty Reports & Articles
    • 0️⃣Index
    • 1️⃣Takeover's (Accounts, Sub-domains, etc)
      • 🚡Sub Domain Takeover
      • 🚠Account Takeover
      • 🚟dependency confusion vulnerability
    • 2️⃣IDOR (Indirect Object Reference)
    • 3️⃣Leaks & Disclosure (PII, API Key, etc)
    • 4️⃣Open Redirects
    • 5️⃣Request Forgery (CSRF & SSRF)
      • 🟢CSRF
      • 🔴SSRF
    • 6️⃣Injections (HTML, XSS, etc)
      • 🟡XSS
      • 🟠HTML Injection
      • 🟣CR/LF Injection
      • 🟢SSTI
    • 7️⃣Broken Access Control & Broken Authentication
      • ⚙️File Upload Functionality
      • ⚙️Password Reset Functionality
      • ⚙️2FA Functionality
      • ⚙️Oauth Functionality
      • ⚙️Bypassing
      • ⚙️Misconfiguration
    • 8️⃣Web Socket
    • 9️⃣Miscellaneous Reports
    • 0️Cloud
      • 🌩️AWS S3
    • 1️Low Hanging Fruits
    • 2️Cache Poising
    • 3️DOS/DDOS
  • Bug Bounty Platforms
    • 🐛BugCrowd
    • 🐞HackerOne
    • 🪲Intigriti
    • 🐜Open Bug Bounty
  • Exploiting Technologies
    • 0️⃣Introduction
    • 1️⃣Wordpress
    • 2️⃣GraphQL API
    • 3️⃣IDOR Vulnerability
    • Learn Android Hacking
Powered by GitBook
On this page
  1. Bug Bounty Reports & Articles
  2. Injections (HTML, XSS, etc)

XSS

PreviousInjections (HTML, XSS, etc)NextHTML Injection

Last updated 5 months ago

6️⃣
🟡
LogoReddit disclosed on HackerOne: [accounts.reddit.com] Redirect...HackerOne
LogoLeveraging XSS to get RCE in Textpattern | Pentest LimitedPentest
LogoCS Money disclosed on HackerOne: Blind XSS on image uploadHackerOne
Logo10 Practical scenarios for XSS attacksPentest-Tools.com
LogoStarbucks disclosed on HackerOne: Reflected Cross site Scripting...HackerOne
LogoGlassdoor disclosed on HackerOne: Reflected XSS on...HackerOne
LogoLeveraging Reflected XSSMedium
LogoLeveraging XSS to Read Internal FilesAll Things Security
LogoXSS without parentheses and semi-colonsPortSwigger Research
LogoAn Interesting Case of XSS Caused by File Upload | by Xiaodong - Freedium
LogoHOW RECON HELPED ME TO GET A STORED XSS!Medium
LogoSuper Blind SQL Injection- $20000 bounty | Thousands of targets still vulnerableMedium
LogoHow I was able to find 50+ Cross-site scripting (XSS) Security Vulnerabilities on Bugcrowd Public…Medium
LogoXYZ of XSSMedium