OP 18 August, 2020 - 09:18 AM
You must ve heard of sql injection right? where sql is a database language
XSS on the other hand is Javascript Injection where javascript is a scripting language.
We Inject certain codes(Sql/Javascript) which are triggered when executed on the server.
Easy Peazy
Preferred browser to try hunting XSS Vulnerabilities is any which isnt having chromium support.
To me its : Mozilla Firefox
Why not chromium supported browsers ?
Chromium has an inbuilt XSS Auditor which will restrict most of your payloads there and then.
XSS on the other hand is Javascript Injection where javascript is a scripting language.
We Inject certain codes(Sql/Javascript) which are triggered when executed on the server.
Easy Peazy
Preferred browser to try hunting XSS Vulnerabilities is any which isnt having chromium support.
To me its : Mozilla Firefox
Why not chromium supported browsers ?
Chromium has an inbuilt XSS Auditor which will restrict most of your payloads there and then.