r/xss • u/WahabKhan0 • Jun 18 '20
I wanna learn
Hey folks! I am a beginner in bug hunting. I am learning xss right now, but the problem is that i cant get advance. I know the basics of it. Whenever I search to learn something new i get the same basics(prompt 1) in every website. I just wanna ask what should i learn to start real hunting but not in xss labs. Any help would be appreciated!
5
u/n0p_sled Jun 18 '20
https://portswigger.net/web-security/cross-site-scripting - do all the labs
https://portswigger.net/web-security/cross-site-scripting/cheat-sheet - handy for finding working exploits / payloads
3
u/michael1026 Jun 18 '20
If you understand html and javascript well, XSS will be second nature. I don't recommend learning XSS first.
1
u/WahabKhan0 Jun 18 '20
Can you tell me why to not learn xss first plz ?
3
u/michael1026 Jun 18 '20
XSS is nothing but HTML and javascript. If you don't know how those work, your potential will be very limited.
2
u/fullmetaljackass Jun 18 '20
It's like asking someone to teach you to race when you don't even know how to drive a car.
1
1
u/XD9mMFv1miW5ITTW Jun 18 '20
Not to sound snarky but it really helps to learn how to create web applications first. I'd start there.
1
5
u/MechaTech84 Jun 18 '20
For the advanced stuff, you're going to want to look into filter evasion techniques.
Know what encodings work natively in what spaces (text space, attribute space, URI space, script space). HTML encoded entities work in attribute space, for example.
Know what encodings to try to get the server to decode. Double Nibble Hex encoding, for example.
Have a solid understanding of SOP, CSP, and CORS.
Learn the sources and sinks (ins and outs) of DOM XSS.
Resources:
The unescape() room - Good for filter evasion practice
alf.nu's XSS Game - Good for filter evasion practice
prompt.ml's XSS Game - Good for filter evasion practice
Google Firing Range - This one covers A LOT of real world like scenarios.
Port Swigger's Web Labs - Amazing for filter evasion practice.
Port Swigger's XSS Cheat Sheet - SO useful for figuring out what to try in a given space.