PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

XSSpect: A browser extension to automate XSS injection

bugcrowd.com | blog | #pentesting | #automation | #xss | #tooling | #browser-extension | #xsspect
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd pentester Phishician introduces XSSpect, a browser extension that auto-injects thousands of XSS payloads into input fields and flags valid cross-site scripting results without a proxy.
Published
Collected

Related coverage

blog · bugcrowd.com
Agentic vs human offensive security testing: Where AI actually earns its keep
Bugcrowd's CTO and offensive security lead break down where agentic security testing earns trust, where human judgment still wins, and how to roll it out without burning engineering's confidence.
blog · blog.trailofbits.com
SequenceHash: multihashing for the rest of us
We're releasing SequenceHash and its sister function SequenceMAC, a pair of related hash constructions that bring secure multihashing to developers using hash functions other than Keccak.
blog · xbow.com
Grok 4.7 Is Different. So Is the Best Way to Use It.
XBOW tested Grok 4.7 on exploit crafting and agentic pentests: inside xAI's Build it improved substantially over 4.6, outside Build it slipped slightly—orchestration now matters as much as prompts.
blog · yeswehack.com
Why pentests cause security debt
New features ship, dependencies update, new APIs are added… and all the while, despite your pentest program, security debt mounts up.
blog · yeswehack.com
Pentests are dead. Long live pentests.
Traditional pentests have created a cottage industry of painful admin. So what needs to change?
blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
Back