Writeups
-
Easy
Clobbering DOM attributes to bypass HTML filters
dom clobbering that breaks the HTMLJanitor sanitizer by injecting <input id=attributes> to clobber a form's attributes property so the filter loop fails and an onfocus=print() form survives
DOM-based vulnerabilities 3 min -
Medium
Exploiting DOM clobbering to enable XSS
dom clobbering that turns safe html only comments into xss, using two id=defaultAvatar anchors to clobber window.defaultAvatar so its avatar property is an anchor href that breaks out of the unescaped img src and adds an onerror=alert(1)
DOM-based vulnerabilities 4 min -
Easy
DOM-based cookie manipulation
dom based cookie manipulation where the product page copies its url into a lastViewedProduct cookie that the home page reflects into html unsafely
DOM-based vulnerabilities 3 min -
Easy
DOM-based open redirection
dom based open redirect where the back to blog link pulls a url=
DOM-based vulnerabilities 1 min -
Easy
DOM XSS using web messages and JSON.parse
dom xss where a web message is parsed with JSON.parse and a load-channel type sets an iframe src to the message's url
DOM-based vulnerabilities 3 min -
Easy
DOM XSS using web messages and a JavaScript URL
dom based redirect from a web message into location.href, guarded by a flawed indexOf check that only requires http: to appear somewhere
DOM-based vulnerabilities 2 min -
Easy
DOM XSS using web messages
dom xss where the page writes any web message straight into innerHTML with no origin check
DOM-based vulnerabilities 2 min
Nothing matched that.
No writeups here yet. Try a broader tag, or clear the filter to see everything.
Clear filters