We retweet your #DOMXSS news and findings
Joined March 2011
- Tweets 462
- Following 0
- Followers 1,612
- Likes 6
Photos and videos
DOM XSS retweeted
3 Aug 2018
Coinbase AngularJS DOM XSS via Kiteworks: nice write-up by @PaulosYibelo
bit.ly/2Mfb3SZ
52
117
DOM XSS retweeted
23 Oct 2018
DOM #XSS, it's time to say goodbye. See the newest status update on Trusted Types, delivered at #w3ctpac. The simplest polyfill is a tiny TrustedTypes={createPolicy:(n,rules)=>rules} (yes, that can help end DOM XSS), but there's so much more good news! Https://tinyurl.com/tttpac
2
47
98
DOM XSS retweeted
3 Dec 2018
Writeup: DOM Based XSS in Alibaba's *.ucweb.com by @sudhanshur705
medium.com/@sudhanshur705/st…
#bugbounty #infosec #pentest #exploit #PoC #cybersecurity #hacking
3
55
148
[RecentQuestions] Is this code vulnerable to DOM based XSS jquery animate? dlvr.it/Qv7wRy [sec.stackexchange]
2
3
DOM XSS retweeted
30 Dec 2018
DOMXSSHilight:-
Burp Extension in Python hilighting DOM Sinks and Sources using DOM XSS Wiki regex.
github.com/sechacking/DOMXSS…
1
14
37
"At @GoogleVRP, DOM based cross-site scripting is already the most common variant of XSS" @lavakumark
2
3
[Tool] XSStrike v3.0 - Most Advanced XSS Detection Suite
Reflected and DOM XSS Scanning
Multithreaded crawling
Context analysis
Configurable Core
Highly Researched Workflow
WAF detection & evasion
Handmade HTML & JavaScript parser
Powerful fuzzing engine
github.com/s0md3v/XSStrike
2
4
DOM XSS retweeted
26 Oct 2018
Intelligent work by @lavakumark in DOMGO.AT selecting debug flag enables pre assigned debug locations to facilitate understanding of domxss working.
4
4
DOM XSS retweeted
16 Oct 2018
The newly discovered DOM-XSS vulnerability affects Tinder, Shopify, Yelp and many other.
#DOM-XSS #hackers #security #cyber
ow.ly/DNDc30mfswg
1
DOM XSS retweeted
16 Oct 2018
Seems that Hackerone staff give duplicate for the good reports and when you ask an invite to the main report .. the response is great too ( not duplicate)
hackerone.com/reports/405191
1
3
DOM XSS retweeted
26 Sep 2018
What you see is not all you get: #XSS vulnerability in @KendoUI Editor allows remote attackers to inject arbitrary #JavaScript into the DOM of the #WYSIWYG editor r.sec-consult.com/kendo No Patch, but workaround by vendor #HTML #vulnerability #kendo #infosec
9
12
DOM XSS retweeted
16 Aug 2018
DOM XSS at Cadillac (PoC)
Video:
youtu.be/OH1G5L1CHVI
Closed as Informative
Reason:
The owner can't reproduce it. :3
#GeneralEG
#BugsHunting
4
15
DOM XSS retweeted
17 Aug 2018
Making Easy DOM XSS Actually Easy With Eval Villain - hurricanelabs.com/blog/makin… #firefox #web #extension #evalvillain #domxss
2
6
Coinbase AngularJS DOM XSS via Kiteworks. goo.gl/GSGgjX ( ) #Security #178 (2017)
1
1
DOM XSS retweeted
30 Jul 2018
Learn DOM XSS if you don’t know it already. Follow @garethheyes
29 Jul 2018
Bypassing DOMPurify with mXSS thespanner.co.uk/2018/07/29/…
2
1
7
DOM XSS retweeted
8 Jul 2018
And in general I don't think we are struggling with XSS because sanitization is hard. It's hard because the DOM APIs are insecure by default and in the end we end up with DOM XSS everywhere.
1
Turning a DOM based #XSS into an attack to hack #XBOX online & live accounts. Microsoft has fixed it, so now releasing the #PoC vid that shows the #exploit in action. There was #NoBugBounty as MS has stopped BB's for online services. #hacking #ITSecurity youtube.com/watch?v=xfCUMH11…
1
12
22