How to: XSS (Cross-Site Scripting)<a name="xss_manual"></a>
https://rhynorater.github.io/postMessage-Braindump
# postMessage-related bugs have landed me some serious bounties during the past couple live hacking events. Here is a quick summary of what you need to know about postMessage.

https://www.gremwell.com/firefox-xss-302
# Forcing Firefox to Execute XSS Payloads during 302 Redirects.

https://trufflesecurity.com/blog/xsshunter/
# Truffle Security is proud to host a new XSSHunter.

https://tinyxss.terjanq.me/
# A collection of short XSS payloads that can be used in different contexts.