Tag: Article

6 results

Exploring the DOMPurify library: Bypasses and Fixes

date_range date: Nov 17, 2024

Article - Web - mXSS

---

Playing with DOMPurify's custom elements handling

date_range date: Feb 15, 2024

Article - Web - XSS

---

Linux local electron application script-src: self bypass

date_range date: Jul 04, 2023

Article - Web - XSS

---

Abusing Client-Side Desync on Werkzeug

date_range date: Jun 07, 2023

Article - Web - Request_Smuggling

---

EJS - Server Side Prototype Pollution gadgets to RCE

date_range date: Mar 09, 2023

Article - Web - SSPP

---

How I was able to rick roll every users on root-me.org

date_range date: Mar 27, 2022

Article - Web

---