Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Blind XSS : setup your self-hosted XSS Hunter with the PwnMachine

yeswehack.com | vulnerability | #bug-bounty | #xss | #tooling | #blind-xss | #self-hosted | #pwnmachine | #xss-hunter

Summary

A step-by-step tutorial for self-hosting XSS Hunter Express on PwnMachine: configuring DNS, patching for volumes and SSL, and exposing it via Traefik for blind XSS campaigns.
Published
Collected

original ↗

Related coverage

  1. PwnMachine: quick update about fix and new features (yeswehack.com)
  2. PwnMachineV2: a new version of the self hosted pwning environment for Bug Bounty (yeswehack.com)
  3. Flounder: Autonomous AI White-Hat Security Auditor with Execution-Grounded Verification (github.com)
  4. Cracking my windshield and earning $10,000 on the Tesla Bug Bounty Program (samcurry.net)
  5. Critical SQL Injection in Metabase via Password Reset: CVE-2026-72898 (bishopfox.com)
  6. How Bug Bounty Uncovered A 5-Year-Old Vulnerability In Hours (hackerone.com)

back