1.PimpMyCaido #1: Hunt client-side vulnerabilities with DOMLogger++blog | 2026-08-06 07:47 | yeswehack.com | Original ↗ | .md | #bug-bounty | #web-security | #xss
2.Concealing payloads in URL credentialsresearch | 2024-10-23 14:03 | portswigger.net | Original ↗ | .md | #firefox | #web-security | #dom-xss
3.Enabling Trusted Types in a Complex Web Application: A Case Study of AppSheetblog | 2024-07-01 00:00 | bughunters.google.com | Original ↗ | .md | #web-security | #case-study | #dom-xss
4.DOM Invader and the case of direct eval vs indirect evalblog | 2023-09-25 14:00 | portswigger.net | Original ↗ | .md | #portswigger-research | #dom-invader | #dom-xss
5.DOJO CHALLENGE #20 Winners!vulnerability | 2023-06-06 13:37 | yeswehack.com | Original ↗ | .md | #bug-bounty | #web-security | #dojo
6.Ambushed by AngularJS: a hidden CSP bypass in Piwik PROresearch | 2023-04-28 12:31 | portswigger.net | Original ↗ | .md | #web-security | #dom-xss | #csp-bypass
7.Finding DOM Polyglot XSS in PayPal the Easy Wayresearch | 2022-09-07 09:04 | portswigger.net | Original ↗ | .md | #bug-bounty | #dom-invader | #dom-xss
8.Finding client-side prototype pollution with DOM Invaderblog | 2022-06-20 12:37 | portswigger.net | Original ↗ | .md | #burp-suite | #xss | #client-side-security
9.Introducing DOM Invader: DOM XSS just got a whole lot easier to findblog | 2021-06-30 16:47 | portswigger.net | Original ↗ | .md | #burp-suite | #xss | #portswigger
10.90+ Cryptocurrency Exchanges Were at Risk Because of One Outdated Libraryblog | 2020-01-15 13:43 | hackenproof.com | Original ↗ | .md | #cryptocurrency | #xss | #vulnerability
11.Dynamic analysis of JavaScriptblog | 2018-08-13 15:47 | portswigger.net | Original ↗ | .md | #burp-suite | #dom-xss | #javascript
12.Burp gets new JavaScript analysis capabilitiesblog | 2014-07-28 15:43 | portswigger.net | Original ↗ | .md | #burp-suite | #dom-xss | #javascript