Curated security research, vulnerabilities, advisories and tools for practitioners.

#script-gadgets

Security coverage tagged script-gadgets.

1.

Evading defences using VueJS script gadgets

research | 2022-09-07 09:05 | portswigger.net | Original ↗ | .md | #xss | #waf-bypass | #csp-bypass

2.

Finding DOM Polyglot XSS in PayPal the Easy Way

research | 2022-09-07 09:04 | portswigger.net | Original ↗ | .md | #bug-bounty | #dom-invader | #dom-xss

3.

Hunting nonce-based CSP bypasses with dynamic analysis

research | 2021-09-17 14:00 | portswigger.net | Original ↗ | .md | #xss | #burp-scanner | #dynamic-analysis