Test objectives
DOM XSS | Identify where a value is put into a DOM sink and reflected back onto the page + Assess the input they accept and see if we can't pass around any filters |
---|---|
Reflected XSS- | Identify where a value is stored into the DB and reflected back onto the page + Assess the input they accept and see if we can't pass around any filters |
Stored XSS | Identify where a value is reflected into the response + Assess the input they accept and see if we can't pass around any filters |