Web Exploitation / WebApp PenTest

Bypassing XSS filters

In the XSS world, there are many tags, events, attributes can be used to execute js. Tag can execute js <script> <a> <p> <img> <body> <button> <var> <div> <iframe> <object>...