xss.cheat

% XSS cheat sheets

$ js_file: find . -type f -name '*.js' 2>/dev/null | sort -u

# hack the box cheat: XSS javascript dangerous functions
(echo 'innerHTML and outerHTML must be DOM objects'; grep -E '\.innerHTML|\.outerHTML|document\.write\(\)|document\.writeln\(\)|document\.domain' <js_file>)

# hack the box cheat: XSS javascript dangerous jQuery functions
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ gnugrep ]' -c grep -E 'html\(\)|parseHTML\(\)|add\(\)|append\(\)|prepend\(\)|after\(\)|insertAfter\(\)|before\(\)|insertBefore\(\)|replaceAll\(\)|replaceWith\(\)' <js_file>