Cheat Sheets
Quick-reference guides for XSS testing.
- CSP Bypass Cheat Sheet
Quick reference for Content-Security-Policy testing
- CSS Injection Cheat Sheet
CSS-based XSS vectors for authorized testing
- DOM Clobbering Cheat Sheet
HTML injection that overwrites DOM properties and globals
- WAF Bypass Cheat Sheet
Filter evasion patterns for authorized XSS testing
- XSS Quick Reference
Essential XSS testing cheat sheet