Tag: Article

8 results

An 18 years old bug

date_range date: Mar 01, 2025

Article - PwnMe2025 - Web - Browser

---

Exploring the DOMPurify library: Hunting for Misconfigurations (2/2)

date_range date: Feb 10, 2025

Article - Web - mXSS

---

Exploring the DOMPurify library: Bypasses and Fixes (1/2)

date_range date: Nov 17, 2024

Article - Web - mXSS

---

Playing with DOMPurify's custom elements handling

date_range date: Feb 15, 2024

Article - Web - XSS

---

Linux local electron application script-src: self bypass

date_range date: Jul 04, 2023

Article - Web - XSS

---

Abusing Client-Side Desync on Werkzeug

date_range date: Jun 07, 2023

Article - Web - Request_Smuggling

---

EJS - Server Side Prototype Pollution gadgets to RCE

date_range date: Mar 09, 2023

Article - Web - SSPP

---

How I was able to rick roll every users on root-me.org

date_range date: Mar 27, 2022

Article - Web

---