I am researching about XSS and Google helped me a lot about learning like how to bypass XSS filters, POST and GET based XSS .

I am really curious to know how to find hidden parameters manually for XSS testing purposes.

Also can we find parameters by Google dorking? Or by viewing page source code? Also any tools that can be used for finding parameters?

  • Hello and welcome! What do you mean by "hidden parameters"? I'm not familiar with the phrase. – Anders Mar 29 '19 at 17:28
  • Developers don't want to show some parameters to client side. So they hide those parameters. – user11177344 Mar 30 '19 at 16:10
  • Do you mean input type="hidden" ? – Rahul Mar 30 '19 at 17:53
  • @user11177344 I still don't understand. What do you mean by parameter? Query parameter like ?foo=bar in the URL? And what do you mean by hiding it to the client side? – Anders Mar 31 '19 at 9:05

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.