---
id: 10285
title: "Exploiting Web Worker XSS with Blobs"
source_domain: lab.ctbb.show
source_url: "https://lab.ctbb.show/research/Exploiting-web-worker-XSS-with-blobs"
published_at: "2025-08-08T00:00:00Z"
tags: ["xss", "exploitation", "web-worker", "blob"]
phying_url: "https://phying.com/item/10285"
lang: en
---

# Exploiting Web Worker XSS with Blobs

## Summary

Ways to turn XSS in a Web Worker into full XSS, covering known tricks and a new generic exploit using Blob URLs with the Drag and Drop API

## Intelligence Metadata

- **Sources:** lab.ctbb.show
- **Published:** 2025-08-08T00:00:00Z
- **Original:** https://lab.ctbb.show/research/Exploiting-web-worker-XSS-with-blobs
- **Phying News:** https://phying.com/item/10285