alert:javascript(1); @alertjavascrip1
Joined October 2019-
Tweets18
-
Followers0
-
Following6
-
Likes3
AppleTV uXSS by @fransrosen ...
Discover 4 tips for our XSS challenge, a SSTI by @err0rrrrr, live recon with @yaworsk and @PortSwigger's ultimate XSS payload generator in this week's #BugBytes! 🐛 go.intigriti.com/bugbytes-38
[dos] WebKit - Universal XSS in WebCore::command dlvr.it/RFGNRK
[dos] WebKit - Universal XSS Using Cached Pages dlvr.it/RFGNRX
Normalized Stored #XSS (\xef\xbc\x9c => \x3c) goo.gl/fb/WnXFtk [posted by #hahwul] #bugbounty #bugbountytips
XSS and open redirect on Twitter: hackerone.com/reports/260744 #BugBountytips #BugBounty
XSS magic trick, by @garethheyes just great ! bit.ly/2nK1kNf
A must read Xss article by @mefkansec medium.com/@efkan162/how-…
Using DOM XSS in XUL to get RCE in Firefox - great research by @FreddyB frederik-braun.com/firefox-ui-xss…
“XSS using meta Tags” by Ijaz Ur Rahim link.medium.com/C30DLtYLm0
CloudFront ~`XSS´ payload, shake dice. 🎲 <iframe srcdoc=<svg/onload=alert(1)>> #BugBounty #BugBountyTip #WAF #infosec
“Stealing login credentials with Reflected XSS” by mehulpanchal007 link.medium.com/6hm0NTGTq0
hahwul.com/p/resources.ht… for Hacking & BugBounty OWASP Cheatsheet Payload all the Things PortSwigger Web Security Academy PortSwiigger XSS CheatSheet HackerOne Target List BugCrowd Target List OpenBugBounty Everything BugBounty 0day Zero-Day Exploit
Found HTML Injection in a web form but the CSP was blocking execution. I noticed *.google.com was allowed which is common for Google Analytics. Hosted an xss.js payload on Google Drive and found the raw download link. Passed that in to the script src location and💥! CSP Bypass.
XSS cheat sheet by @PortSwigger - Interactive, Easy to use, pretty useful == just awesome ! #infosec #pentest #bugbounty portswigger.net/web-security/c…
We've published the XSS cheat sheet data on Github and we are now accepting submissions via a pull request. Please contribute and make the XSS cheat sheet better. github.com/hackvertor/xss…
Only one #XSS payload has ever actually blown my mind: <input onfocus=alert(0) autofocus> The entire idea of having an autofocus attribute on the same payload execute it makes it so powerful, it's such a crazy payload and has got me loads of bounties. #bugbounty #bugbountytips
𝐂𝐮𝐫𝐭𝐢�... @CurtBraz
2K Followers 880 Following Cybersecurity researcher/blogger/pentester. Try to tweet only technical/educational but occasionally post about https://t.co/MTZoEINlWg 🙂
Florian Hansemann @CyberWarship
84K Followers 47 Following Father, Founder @HanseSecure, Pentesting, Student, ExploitDev, Redteaming, InfoSec & CyberCyber; -- Mastodon: https://t.co/KFSKYUN98M
XSS Payloads @XssPayloads
52K Followers 0 Following
PortSwigger Research @PortSwiggerRes
111K Followers 7 Following Web security research from the team at @PortSwigger
Rodolfo Assis @RodoAssis
10K Followers 119 Following That #XSS and #WAF #bypass guy. @BRuteLogic @KN0X55
m0z @LooseSecurity
7K Followers 192 Following The greatest trick the devil ever pulled, was convincing the world that cyber security existed.Trends for United States
You might like
