XSS攻击

*原理

http://www.2cto.com/Article/201301/186695.html

*套现

http://html5sec.org/

*乌云百科 

http://wiki.wooyun.org/web:xss

*基于DVWA, 用IE

http://blog.sina.com.cn/s/blog_40257eb50101c4nh.html

http://blog.sina.com.cn/s/blog_40257eb50101c4ol.html

http://www.linuxwang.com/html/2035.html

http://www.bkjia.com/webzh/1002108.html

*XSS平台

xsser.me

http://www.webxss.cn/index.php

https://www.zhihu.com/question/24740239/answer/28824008

*Dom xss

http://www.2cto.com/Article/201301/186665.html

*常用语句

http://www.exehack.net/867.html

*xss工具

http://www.2cto.com/Article/201301/181617.html

原文地址:https://www.cnblogs.com/yaolei/p/5215797.html