Cross-Site Scripting

Follow your input from reflection to execution. Context decides the payload — marker first, read the HTML, then adapt.

Reflected

• Reflected XSS (GET)Ready
• XSS in the POST bodyReady

Escaping Context

• Attribute contextReady
• Textarea contextReady
• Title contextReady
• Style contextDrill
• Script variable contextReady

Markdown

• Markdown: permissive parserReady
• Markdown: filtered parserReady

Stored

• Stored: classic comment wallReady
• Stored: fire-and-forget (separate sink)Ready

Blind

• Blind: profile & report sinksReady
• Blind: request headers (UA)Ready

Evasion

• Evasion: case mix & one-time stripsReady
• Evasion: forgotten vectorsReady
• Evasion: balance & reassemblyReady