Introducing DOM Invader: DOM XSS just got a whole lot easier to find

Published

2021-06-30 16:47

Collected

2026-07-01 11:05

---
id: 328
title: "Introducing DOM Invader: DOM XSS just got a whole lot easier to find"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/introducing-dom-invader"
published_at: "2021-06-30 16:47"
tags: ["burp-suite", "xss", "portswigger", "tooling", "dom-invader", "dom-xss", "sources-and-sinks"]
phying_url: "https://phying.com/item/328"
lang: en
---

# Introducing DOM Invader: DOM XSS just got a whole lot easier to find

## Summary

PortSwigger introduced DOM Invader, an extension in Burp's embedded browser whose Augmented DOM maps all sources and sinks in a tree view, making DOM-based XSS far easier to find and exploit.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2021-06-30 16:47
- **Original:** https://portswigger.net/blog/introducing-dom-invader
- **Phying News:** https://phying.com/item/328