OP 18 August, 2020 - 09:18 AM
You must ve heard of sql injection right? where sql is a database language
XSS on the other hand is Javascript Injection where javascript is a scripting language.
We Inject certain codes(Sql/Javascript) which are triggered when executed on the server.
Easy Peazy
Preferred browser to try hunting XSS Vulnerabilities is any which isnt having chromium support.
To me its : Mozilla Firefox
Why not chromium supported browsers ?
Chromium has an inbuilt XSS Auditor which will restrict most of your payloads there and then.
XSS on the other hand is Javascript Injection where javascript is a scripting language.
We Inject certain codes(Sql/Javascript) which are triggered when executed on the server.
Easy Peazy
Preferred browser to try hunting XSS Vulnerabilities is any which isnt having chromium support.
To me its : Mozilla Firefox
Why not chromium supported browsers ?
Chromium has an inbuilt XSS Auditor which will restrict most of your payloads there and then.
![[Image: Udpc9Lb.gif]](https://i.imgur.com/Udpc9Lb.gif)
![[Image: fansignshorizontal.gif]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fbtcwes.com%2Fi%2Ffansignshorizontal.gif)