# \[XSS Exploitation]

- [Introduction](/pentesting-notes/certification-preparation/cwee-prep/introduction-1/xss-exploitation/introduction.md)
- [Launching Attacks from Victim's Session](/pentesting-notes/certification-preparation/cwee-prep/introduction-1/xss-exploitation/launching-attacks-from-victim-session.md)
- [Enumerating Internal APIs](/pentesting-notes/certification-preparation/cwee-prep/introduction-1/xss-exploitation/enumerating-internal-apis.md)
- [Exploiting Internal Web Apps I](/pentesting-notes/certification-preparation/cwee-prep/introduction-1/xss-exploitation/exploiting-internal-web-applications-1.md)
- [Exploiting Internal Web Apps II](/pentesting-notes/certification-preparation/cwee-prep/introduction-1/xss-exploitation/exploiting-internal-web-applications-2.md)
- [Content-Security Policy (CSP)](/pentesting-notes/certification-preparation/cwee-prep/introduction-1/xss-exploitation/content-security-policy-csp.md)
- [Bypassing Weak CSPs](/pentesting-notes/certification-preparation/cwee-prep/introduction-1/xss-exploitation/bypassing-weak-csps.md)
- [XSS Filter Bypasses](/pentesting-notes/certification-preparation/cwee-prep/introduction-1/xss-exploitation/xss-filter-bypasses.md)
- [XSS Prevention](/pentesting-notes/certification-preparation/cwee-prep/introduction-1/xss-exploitation/xss-vulnerability-prevention.md)
