Do you know how to bypass single quote (') or double quote (") escaping or the backslash too for xss ?

[thegovenor]

I appreciate any help

 

[grozdniyandy]

It has to be manually tested. I prefer for you to use polyglots - https://github.com/0xsobky/HackVault/wiki/Unleashing-an-Ultimate-XSS-Polyglot
There are also common methods like htmlencoding, urlencoding, double html/url encoding and etc.

 

[thegovenor]

mucho gracias

 

[frankish]

normally you would HTML encode or URL encode

It has to be manually tested. I prefer for you to use polyglots - https://github.com/0xsobky/HackVault/wiki/Unleashing-an-Ultimate-XSS-Polyglot
There are also common methods like htmlencoding, urlencoding, double html/url encoding and etc.

thanks didn't know about this one!

 

[raywood]

https://infosecwriteups.com/how-to-bypass-xss-filters-a-practical-example-3189877fe2cehttps://infosecwriteups.com/how-to-bypass-xss-filters-a-practical-example-3189877fe2ce

 

[frankish]

https://infosecwriteups.com/how-to-bypass-xss-filters-a-practical-example-3189877fe2cehttps://infosecwriteups.com/how-to-bypass-xss-filters-a-practical-example-3189877fe2ce

any tools to search this like the one posted before?