Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

XSSpect: A browser extension to automate XSS injection

bugcrowd.com | blog | #pentesting | #automation | #xss | #tooling | #browser-extension | #xsspect

Summary

Bugcrowd pentester Phishician introduces XSSpect, a browser extension that auto-injects thousands of XSS payloads into input fields and flags valid cross-site scripting results without a proxy.
Published
Collected

original ↗

Related coverage

  1. PimpMyCaido #1: Hunt client-side vulnerabilities with DOMLogger++ (yeswehack.com)
  2. StrikeAgent AtkBrain-Flash: Autonomous AI Penetration Testing & Red Teaming Platform (github.com)
  3. zhaoxuya520/reverse-skill: Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack (github.com)
  4. An Interesting XSS-Bypassing WAF (labs.cognisys.group)
  5. Does agentic pen testing replace vulnerability scanning? (bugcrowd.com)
  6. The hidden cost of agentic pentesting (bugcrowd.com)

back