1.DOM Invader and the case of direct eval vs indirect evalblog | 2023-09-25 14:00 | portswigger.net | Original ↗ | .md | #portswigger-research | #dom-invader | #dom-xss
2.Bypassing CSP via DOM clobberingresearch | 2023-06-05 14:00 | portswigger.net | Original ↗ | .md | #burp-suite | #web-security | #xss
3.Detecting web message misconfigurations for cross-domain credential theftresearch | 2022-11-09 14:13 | portswigger.net | Original ↗ | .md | #burp-suite | #credential-theft | #dom-invader
4.Widespread prototype pollution gadgetsresearch | 2022-10-28 13:04 | portswigger.net | Original ↗ | .md | #web-security | #prototype-pollution | #dom-invader
5.Finding DOM Polyglot XSS in PayPal the Easy Wayresearch | 2022-09-07 09:04 | portswigger.net | Original ↗ | .md | #bug-bounty | #dom-invader | #dom-xss
6.Finding client-side prototype pollution with DOM Invaderblog | 2022-06-20 12:37 | portswigger.net | Original ↗ | .md | #burp-suite | #xss | #client-side-security
7.Introducing DOM Invader: DOM XSS just got a whole lot easier to findblog | 2021-06-30 16:47 | portswigger.net | Original ↗ | .md | #burp-suite | #xss | #portswigger