All You Need to Know About Cross-Site Scripting (XSS) 

i found 9 xss in vdps last month i switch to paid programes it's so hard brother :( now im learning about idors & logic bugs

Let's gooo! Thank you :)

@@bughunterlabs Yeeeeeeaaaaah dog, let’s gooooooooo!!

Great to hear! All the best for your new journey!

Thanks a lot!

Thank you so much :)

It is a wild ride indeed! Thank you for the support!

Thank you. More is on the way! 🥳

Hi. Thanks for your comment. The underline is by itself not a malicious character. In general, popping an alert is usually one way to show that a site is vulnerable to XSS. But you can also probe for XSS by injecting HTML elements like canary123 and then check for underlined text. If you find something like this you can go on to try to pop an alert or execute other javascript. In the end, it is all about showing (or indicating) impact.

Hi. Check out the cheat sheet. There is a resource section at the bottom :)