Book review: Cross Site Scripting Attacks
Summary: PortSwigger's Dafydd Stuttard reviewed XSS Attacks, a book by Jeremiah Grossman, Robert Hansen, Anton Rager, Petko Petkov and Seth Fogie that runs from a beginner's introduction to XSS through advanced exploitation and current attack techniques. He describes it as well-organised and technically accurate, with filter bypasses, coverage of JavaScript-based port scanning, history stealing and JSON hijacking, and delivery of XSS through Flash and PDF.
What's compelling: The techniques the review singles out - filter bypasses, history stealing, JSON hijacking - are the same ones that decide whether your input filtering and client-side controls hold up, and the book lays out working code for each.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026