Finding and Fixing XSS
Detect and Defend Against Real-World XSS AttacksBy Roland Espinoza
Length8h 3m
About this audiobook
Cross-site scripting is the most pervasive web security flaw, and Finding and Fixing XSS is your hands-on guide to mastering its detection and remediation. Whether you are a beginner developer or a seasoned pro, this book teaches you how to find reflected and stored XSS in real-world applications—and, crucially, how to write fixes that actually close the vulnerability for good.
You will learn to spot XSS in every context: URL parameters, form inputs, JSON responses, and even inside JavaScript strings. Through practical examples and step-by-step walkthroughs, you will understand why common mitigations like HTML encoding or input validation often fail, and how to implement proper output encoding, content security policies, and secure-by-design patterns. Each chapter builds on the last, moving from simple reflected flaws to complex stored attacks that persist across sessions.
The book covers advanced topics such as DOM-based XSS, mutation XSS, and bypassing WAFs, all while emphasizing the mindset of a security engineer who thinks like an attacker. You will also get a complete toolkit for testing your own applications: browser extensions, fuzzing techniques, and automated scanners—but with the caveat that no tool replaces understanding.
Real-world case studies show how XSS was exploited in major breaches, and how the fixes were eventually applied. By the end, you will be able to audit any web application for XSS, write secure code from the start, and explain the risks to non-technical stakeholders. This is not just a theory book—it is a workbook you will keep open on your desk.
Competing titles like [placeholder] and [placeholder] cover XSS superficially, but this book goes deep into the mechanics of the attack and the exact code changes that close it. If you want to stop XSS for good, start here.
Audiobook details
GenreTechnology
Length8 hrs 3 mins
Narrated byListen with 1,000+ voices
FormateBook with Audio
LanguageEnglish
Table of contents
1Preface
2Chapter 1 — The Web Security Landscape – Why XSS Still Matters
3Chapter 2 — Setting Up Your Ethical Hacking Lab
4Chapter 3 — Core Concepts – How XSS Works
5Chapter 4 — Your First Payload – Reflected XSS in Action
Show all chaptersShow less
6Chapter 5 — Stored XSS – The Persistent Threat
7Chapter 6 — DOM-Based XSS – Client-Side Dangers
8Chapter 7 — Context Matters – Crafting Payloads for Different Sinks
9Chapter 8 — Escalation – From alert() to Data Theft
10Chapter 9 — Bypassing Filters and WAFs
11Chapter 10 — Advanced Exploitation – Session Hijacking and Worming
12Chapter 11 — Defense Foundations – Input Validation and Output Encoding
13Chapter 12 — Content Security Policy – Your Strongest Shield
14Chapter 13 — Secure Development Practices – Server-Side and Client-Side
15Chapter 14 — Automated Scanning and Manual Testing Techniques
16Chapter 15 — Real-World Case Studies and Bug Bounty Insights
17Chapter 16 — Securing WebForum – Applying All Defenses
18Chapter 17 — Continuous Security – Monitoring and Updating
19Chapter 18 — Future Trends and Your Security Career
20About the Author
LiftoffEric Berger9h 4m4.6 (9.5K)$29 · $0.00
The Honey BusMeredith May9h 31m4.4 (16.6K)$25 · $0.00
Collected Writings of Nikola TeslaThomas Commerford Martin, Nikola Tesla19h 42m4.4 (2.8K)$1.99 · $0.00
Operation PedestalMax Hastings12h 29m4.4 (5.2K)$29 · $0.00
When the Heavens Went on SaleAshlee Vance18h 20m4.4 (3K)$40 · $0.00
Everybody Has a Podcast (Except You)Justin McElroy, Travis McElroy, Griffin McElroy5h 9m4.3 (2.3K)$24 · $0.00
Hands of TimeRebecca Struthers8h 8m4.4 (1.3K)$26 · $0.00
Never Lost AgainBill Kilday10h 1m4.4 (805)$29 · $0.00
How the Internet HappenedBrian McCullough13h 28m4.3 (2.7K)$23 · $0.00
Collected Writings of Nikola TeslaNikola Tesla, Thomas Commerford Martin21h 50m4.3 (1.7K)$1 · $0.00
Just AspireAjai Chowdhry9h 13m4.4 (260)$29 · $0.00
The Little Book of AliensAdam Frank8h 20m4.3 (1.3K)$26 · $0.00
The inventions, researches and writings of Nikola Tesla (Annotated)Thomas Commerford Martin16h 59m4.3 (1.3K)$2 · $0.00
KargilV.P. Malik15h 18m4.3 (2K)$24 · $0.00
Experiments with Alternating CurrentsNikola Tesla9h 16m4.3 (874)$1.99 · $0.00
Fire on the HorizonTom Shroder, John Konrad8h 23m4.3 (858)$26 · $0.00
The Smell of Kerosene (Annotated)National Aeronautics and Space Administration, Donald L. Mallick, Peter W. Merlin11h 32m4.3 (523)$2 · $0.00
The Boy Who Harnessed the WindWilliam Kamkwamba, Bryan Mealer10h 5m4.2 (78.9K)$29 · $0.00
Across the Airless WildsEarl Swift10h 8m4.3 (1.3K)$29 · $0.00
Console WarsBlake J. Harris20h 41m4.2 (13.7K)$46 · $0.00
You may also like
The Case of the Murdered MuckrakerCarola Dunn8h 3m3.7 (3.9K)$20
U.S. MarshalsMike Earp, David Fisher10h 45m4.2 (753)$29 · $0.00
The Seven Dials MysteryAgatha Christie8h 18m3.9 (62.6K)$1.99 · $0.00
The Mystery of the Yellow RoomGaston Leroux8h 19m3.8 (18.2K)$2.30
The Art of Cross-Examination (Annotated)Francis L. Wellman5h 56m4.1 (1.5K)$2.99 · $0.00
Pete the Cat's Not So Groovy DayJames Dean, Kimberly Dean7m4.3 (282)$4 · $0.00
West Virginia NMLS SAFE MLO Exam Study Guide 2026/2027Ignatius Farrow16h 26m$30
A collection of Latin maxims & rules, in law and equityPeter Halkerston5h 3m$1 · $0.00
Wisconsin Contractor License Exam Prep Book 2026/2027Everett Haldane16h 19m$30
How to Make Money Flipping Trading Cards - How to Research Sold Prices, Assess Condition, Decide When to Grade, and Manage Market RiskJACK FLIPWELL8h 33m4.0 (34)$7.80 · $0.00
Vanity Fair: November 2014 IssueVanity Fair5h 28m$7
Inspector HopperDoug Cushman17m4.2 (208)$7 · $0.00
Self-Publishing Guide for Independent AuthorsAnthony Ekanem54m$5
The Science of Fingerprints: Classification and UsesUnited States. Federal Bureau of Investigation5h 12m3.6 (152)$1.99 · $0.00
The Flip Side of HistorySteve Silverman5h 42m3.9 (209)$17
THE CANTERBURY PUZZLES & OTHER CURIOUS PROBLEMSHenry Ernest Dudeney6h 21m3.4 (76)$1.99 · $0.00
The Famous Cases of Dr. Thorndyke: 40 of His Criminal Investigations (Illustrated) (Annotated)R. Austin Freeman44h 38m4.2 (236)$2.99 · $0.00
The Cyber Threat Intelligence Analyst's WorkbookMira Iqbal7h 44m$5 · $0.00
Professor Augustus Van Dusen: 49 Detective Mysteries in One EditionJacques Futrelle38h 37m4.3 (35)$1.99 · $0.00
The Blue Carbuncle (Musaicum Christmas Specials)Arthur Conan Doyle69h 42m4.2 (35)$1.99 · $0.00