Learning security in the open :)
I’m a Penetration tester. I write up each topic as I learn it
the Vulnerabilities, the Tools, the Concepts that finally clicked
- 111writeups
- 110boxes rooted
- 5Certification
Latest writeups
All writeups-
Easy
DOM-based cookie manipulation
dom based cookie manipulation where the product page copies its url into a lastViewedProduct cookie that the home page reflects into html unsafely
DOM-based vulnerabilities 3 min -
Easy
DOM-based open redirection
dom based open redirect where the back to blog link pulls a url=
DOM-based vulnerabilities 1 min -
Easy
DOM XSS using web messages and JSON.parse
dom xss where a web message is parsed with JSON.parse and a load-channel type sets an iframe src to the message's url
DOM-based vulnerabilities 3 min -
Easy
DOM XSS using web messages and a JavaScript URL
dom based redirect from a web message into location.href, guarded by a flawed indexOf check that only requires http: to appear somewhere
DOM-based vulnerabilities 2 min -
Easy
DOM XSS using web messages
dom xss where the page writes any web message straight into innerHTML with no origin check
DOM-based vulnerabilities 2 min -
Easy
Multistep clickjacking
multistep clickjacking that defeats a confirmation dialog by overlaying two decoys
Clickjacking 3 min -
Easy
Exploiting clickjacking vulnerability to trigger DOM-based XSS
clickjacking used to fire a click triggered dom xss, framing the feedback page with an <img src=1 onerror=print()> payload prefilled in the name
Clickjacking 2 min