PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

PimpMyCaido #1: Hunt client-side vulnerabilities with DOMLogger++

yeswehack.com | blog | #bug-bounty | #web-security | #xss | #client-side-security | #prototype-pollution | #caido | #dom-xss | #browser-extension
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A hands-on guide to DOMLogger++, a browser extension and Caido plugin that hooks JavaScript sinks to surface DOM XSS, client-side path traversal, prototype pollution and sanitizer bypasses.
Published
Collected

Related coverage

blog · portswigger.net
Finding client-side prototype pollution with DOM Invader
DOM Invader has been upgraded to detect client-side prototype pollution (CSPP) in a couple of clicks. The post explains pollution sources, gadgets, and how the tool finds and exploits them.
vulnerability · vercel.com
The Vercel Bug Bounty Program is now publicly available
Vercel's Bug Bounty Program is now public on HackerOne, covering all Vercel products and open-source projects. Learn how to participate and report findings.
vulnerability · vercel.com
The Vercel OSS Bug Bounty program is now available
Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
blog · yeswehack.com
How LLMs are changing Bug Bounty: An interview with Aituglo
Bug Bounty hunter Aituglo explains how he uses Claude Code, the Caido AI skill and Playwright in his workflow, which LLMs he trusts most, and how AI is intensifying competition among hunters.
blog · yeswehack.com
‘Being a developer before, I know where to find bugs’: Aituglo’s Bug Bounty story so far
Q&A with top-ranked hunter Aituglo: how a developer background helps him build tools and spot bugs, how he picks targets, and a password-reset flaw affecting every account at a medical firm.
Back