Transforming Self-XSS Into Exploitable XSS

This blog is describes an attempt by a security researcher to exploit a Cross-site Scripting (XSS) vulnerability. It explains the importance of template strings in XSS filtering, how to overcome the document.domain issue, and the discovery and exploitation of Self-XSS, with reading suggestions.

Reflected Cross Site Scripting (r-XSS), by Christopher Makarem, IOCSCAN

Network Security Trends: November 2021 to January 2022

How to exploit self XSS and turn them into good ones - secinthemiddle

10 Practical scenarios for XSS attacks

Turning Self-XSS into non-Self Stored-XSS via Authorization Issue at “PayPal Tech-Support and Brand Central Portal”, by YoKo Kho

Dealing with cross-site scripting issues

AirBnb Bug Bounty: Turning Self-XSS into Good-XSS #2, Geekboy

Self-XSS - Self-XSS Attack Using Bit.Ly To Grab Cookies Tricking Users Into Running Malicious Code

A Pentester's Guide to Cross-Site Scripting (XSS)

10 Practical scenarios for XSS attacks

Turning Self-XSS into non-Self Stored-XSS via Authorization Issue at “PayPal Tech-Support and Brand Central Portal”, by YoKo Kho