PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

When alert fails: exploiting transient events

portswigger.net | research | #web-security | #xss | #waf-bypass | #transient-events | #sendbeacon | #onpagehide
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Exploiting transient events like onpagehide when prompts are blocked: fetch and XHR cannot complete as pages unload, but navigator.sendBeacon lets payloads exfiltrate cookies and DOM data.
Published
Collected

Related coverage

research · portswigger.net
What's in a tag name? JavaScript, apparently
This research provides technical context that security teams can use for monitoring and validation.
research · portswigger.net
Bypassing WAFs with the phantom $Version cookie
Legacy $Version cookies downgrade parsers into RFC2109 mode, and frameworks — Flask, Django, PHP, Spring — disagree on the result. The discrepancies can be abused to smuggle attacks past WAFs.
research · portswigger.net
Bypassing WAFs and cracking XOR with Hackvertor
Gareth Heyes showcases Hackvertor's tag-based encoding for chaining multiple conversion layers inside Burp requests, demonstrating a Cloudflare WAF bypass and XOR cracking.
research · portswigger.net
When security features collide
James Kettle argues stacked security features can make systems easier to exploit, demonstrating a Cloudflare email obfuscation quirk that bypasses its WAF and all browser XSS filters.
research · portswigger.net
Bypassing Web Cache Poisoning Countermeasures
James Kettle examines and bypasses vendor countermeasures to web cache poisoning from Cloudflare, Akamai and Fastly, flagging pitfalls like cacheable block pages enabling DoS.
research · portswigger.net
Evading defences using VueJS script gadgets
VueJS script gadgets for evading defences: expression-based vectors, event tricks and mutation XSS in the framework, useful for bypassing WAFs and CSP and for developers guarding Vue apps.
Back