PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hunting nonce-based CSP bypasses with dynamic analysis

portswigger.net | research | #xss | #burp-scanner | #dynamic-analysis | #nonce | #csp | #script-gadgets
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

How dynamic analysis flagged a nonce-based CSP bypass on portswigger.net: an injected element hijacked a querySelector to control a script URL, defeating what was thought to be a stricter policy.
Published
Collected

Related coverage

research · portswigger.net
Using form hijacking to bypass CSP
Form hijacking bypasses CSP via injected forms or formaction attributes while password managers auto-fill credentials. Seen on Infosec Mastodon and PortSwigger's site; Burp added passive scan checks.
research · portswigger.net
Evading defences using VueJS script gadgets
VueJS script gadgets for evading defences: expression-based vectors, event tricks and mutation XSS in the framework, useful for bypassing WAFs and CSP and for developers guarding Vue apps.
research · portswigger.net
Finding DOM Polyglot XSS in PayPal the Easy Way
Using DOM Invader, PortSwigger found a polyglot DOM XSS in PayPal hidden in CSS-selector handling, then chained unintended script gadgets to bypass the site's CSP after triage dismissed the report.
research · blog.quarkslab.com
Exploring Execution Trace Analysis
The post illustrates advantages of off-line execution trace analysis over on-line approaches, through several examples using Quarkslab's internal trace collection and analysis tooling.
research · yokai.hakaisecurity.io
Client-Side Path Traversal na Prática: De Stored XSS à Exclusão de Conta
# Client-Side Path Traversal na Prática: De Stored XSS à Exclusão de Conta RESEARCHER **Pedro Cruz "gankd"** READ TIME**12 MINUTES** PUBLISHED**15 Oct 2026** INDEX ▸ Sumário ▸ Introdução ▸...
research · yokai.hakaisecurity.io
Client-Side Path Traversal in the Wild: From Stored XSS to Account Deletion
# Client-Side Path Traversal in the Wild: From Stored XSS to Account Deletion RESEARCHER **Pedro Cruz "gankd"** READ TIME**11 MINUTES** PUBLISHED**15 Oct 2026** INDEX ▸ Table of contents ▸...
Back