GAXSS: Effective Payload Generation Method to Detect XSS Vulnerabilities Based on Genetic Algorithm

Table 7

Genetic mutation method (XSS payload bypass method).

Mutation forms	Specific description
Coding confusion	1.HTML encode; 2.Unicode encode; 3.URL encode; 4.Base64
Sensitive words replacement	5.Events sensitive words replacement; 6.Sensitive functions replacement; 7.Blank character replacement; 8.Bracket replacement
Position or form change	9.Attributes and events swap positions; 10.Case change; 11.Shape transformation of pop-up window function
Add special characters	12.Add a blank character (between the event and the trigger code); 13.Insert the tag into the tag; 14.Add notes (between the function and the parentheses); 15.Add some characters before or after the vector