> For the complete documentation index, see [llms.txt](https://hansimov.gitbook.io/hack-skils/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hansimov.gitbook.io/hack-skils/chang-jian-lou-dong/xss.md).

# XSS - 跨站脚本攻击

## 链接

* ~~Cross-site scripting - Wikipedia~~ 
  * [~~https://en.wikipedia.org/wiki/Cross-site\_scripting~~](https://en.wikipedia.org/wiki/Cross-site_scripting)
  * 介绍了 XSS 的基本概念，比较笼统和杂乱
* **Cross Site Scripting (XSS) Software Attack | OWASP Foundation** 
  * <https://owasp.org/www-community/attacks/xss/>
  * <https://owasp.org/www-project-top-ten/OWASP_Top_Ten_2017/Top_10-2017_A7-Cross-Site_Scripting_(XSS).html>
  * <https://owasp.org/www-community/Types_of_Cross-Site_Scripting>
  * **言简意赅，介绍了 XSS 的基本概念、常见类型和代码样例，附的参考链接非常有用**
* ~~给你讲清楚什么是XSS攻击 - 程序员自由之路 - 博客园~~
  * [~~https://www.cnblogs.com/54chensongxia/p/11643787.html~~](https://www.cnblogs.com/54chensongxia/p/11643787.html)
  * 很杂乱，其实并没有讲清楚……
* **浅谈XSS攻击的那些事（附常用绕过姿势） - 知乎**&#x20;
  * <https://zhuanlan.zhihu.com/p/26177815>
  * **结合实例和代码，直观易懂**
* **Cross Site Scripting Prevention - OWASP Cheat Sheet Series**
  * <https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html>
  * **详解如何预防 XSS，提出了一系列规则，实际上是间接告诉我们常见攻击方法**
* **XSS Filter Evasion Cheat Sheet | OWASP**&#x20;
  * <https://owasp.org/www-community/xss-filter-evasion-cheatsheet>
  * **一份超多绕过方法的清单，算是小技巧合集**