Bypassing Basic Security Controls

In this chapter, we will cover the following recipes:

• Basic input validation bypass in Cross-Site Scripting attacks
• Exploiting Cross-Site Scripting using obfuscated code
• Bypassing file upload restrictions
• Avoiding CORS restrictions in web services
• Using Cross-Site Scripting to bypass CSRF protection and CORS restrictions
• Exploiting HTTP parameter pollution
• Exploiting vulnerabilities through HTTP headers