---
id: 5547
title: "Abusing Chrome's XSS auditor to steal tokens"
source_domain: portswigger.net
source_url: "https://portswigger.net/research/abusing-chromes-xss-auditor-to-steal-tokens"
published_at: "2019-06-14T12:02:00Z"
tags: ["browser-security", "chrome", "side-channel", "token-theft", "xss-auditor"]
phying_url: "https://phying.com/item/5547"
lang: en
---

# Abusing Chrome's XSS auditor to steal tokens

## Summary

Gareth Heyes abuses Chrome's XSS Auditor block mode as a side-channel oracle, brute-forcing values such as user IDs embedded in inline scripts and stealing tokens. Includes working PoC code.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2019-06-14T12:02:00Z
- **Original:** https://portswigger.net/research/abusing-chromes-xss-auditor-to-steal-tokens
- **Phying News:** https://phying.com/item/5547