Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

White-box penetration testing: How to debug for JavaScript vulnerabilities

yeswehack.com | blog | #pentesting | #prototype-pollution | #docker | #debugging | #javascript | #white-box

Summary

Guide to white-box pentesting of JavaScript apps in Docker: debugging in VS Code to trace payloads, plus common flaws — prototype pollution (CWE-1321), type confusion and XSS.
Published
Collected

original ↗

Related coverage

  1. White-box penetration testing: Debugging for Python vulnerabilities (yeswehack.com)
  2. White-box penetration testing with Xdebug: Debugging for PHP vulnerabilities (yeswehack.com)
  3. Where Severity Scores Go Wrong: “Just Add Prototype Pollution” (jfrog.com)
  4. When JavaScript Chunks Become Keyholes to the Cloud (labs.cognisys.group)
  5. Dojo challenge #53 Hacker Club solution (yeswehack.com)
  6. PimpMyCaido #1: Hunt client-side vulnerabilities with DOMLogger++ (yeswehack.com)

back