xss Tag Posts Index

XSS Test #1 - Please Do Not Upvote!

XSS Test #1 - Please Do Not Upvote! #2 #3 Just doing some quick cross site scripting tests. No need to upvote this post. test test test test test 1 test test test

My Opinion of XSS/CSS, Digital Forensic, and Digital Crime Investigation when I was a Young Student

Note This is the fourteenth assignment from my Masters Advanced Network Security Course which has never been published anywhere and I, as the author and copyright

[FIXED] XSS vulnerability found in hivekings.com block explorer

Image Source It's another day and I have found a security vulnerability on another Hive block explorer! Dang, I wonder how vulnurable our block explorers are as

XSS found in @drako's scribe.hivekings.com [solved]

src DISCLOSURE: @drakos I found an XSS in one of the sites you maintain. Sending you the details in a private message! UPDATE: After the released fix, code execution

security vulnerability inspection

Test CONGRATULATIONS, YOU WON 10,000 STEEM !! I'M JUSTIN SUN AND I AM A VERY REPUTABLE PERSON, TRUST ME !! CLICK HERE to get your prize ! ( You'll just have to log

XSS found on hiveblockexplorer.com - Please fix.

A few days ago, the user @gaottantacinque brought a cross site scripting bug to my attention. This one, which was found there, was already fixed by the site operator

Stored XSS vulnerability in hiveblockexplorer.com !! [SOLVED]

src I was trying to understand better how Hive works at a technical level, so I was going through some documentation and exploring the content of blocks. I came

Web Pentesting für Einsteiger #2 - Cross Site Scripting

Teil 2 unserer Web #Pentesting für #Einsteiger Videoreihe ist live! Heute werfen wir einen Blick auf die drei Varianten von Cross-Site-Scripting. #XSS

DOMPurify - XSS sanitizer for HTML, MathML and SVG

DOMPurify XSS sanitizer for HTML, MathML and SVG Screenshots Hunter's comment A DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify

XSS - Protect your website from Cross-site scripting

XSS Protect your website from Cross-site scripting Screenshots View Image Hunter's comment Sanitize untrusted HTML (to prevent XSS) with a configuration specified

Steem Platform Security Test / OWASP - XSS Filter Evasion Cheat Sheet

This post acts as a public XSS Security Test for my upcoming Post Editor on SteemWorld. Of course, it can be used to test against many different XSS attacks on other

Etherscan.io Hack Can Manipulate Cryptocurrency Markets

Online panic occurred earlier this week when the users of a popular Ethereum blockchain explorer site has been opening up displaying the cryptic pop-up "l337"

XSS-test

XSS I've tried to hack steemit. Injecting a XSS attack. It didn't work. Congratulations steemit. Well done.

InPost XSS - błąd znaleziony na stronie wyszukiwania przesyłek

Szukam swojej paczki, znajduję XSS W 2016 roku, pod koniec listopada zamawiałem z allegro prezenty na mikołajki. Trochę się martwiłem, że nie dojdą na czas więc

**Basic Security Tests** <script>alert(1)</script>

SAFE LINK [test](javascript:alert(1)) hello https:// prefix %3Cscript%3Ealert%281%29%3C%2Fscript%3E ≮ script ≯ alert(1) ≮ ∕ script ≯ buggy href here but safe Useful

Understanding & Mitigating Cross-Site Request Forgery (CSRF)

CSRF. Easy, enormously effective, frequently misunderstood. This attack can be called a sleeping lion because it is not taken as seriously as it should be. But what

iframe 보안 문제 우회 및 해결법 2

iframe 보안 이슈를 우회하여 다른 여러 사이트를 화면에 표시하는 방법을 소개한다. 크롬에만 국한적인 방법이기때문에 정당한 해결책이라고 할 수는 없지만 이거라도 찾아낸 게 어딘가 싶다. 해결책 = Chrome extension 크롬 확장프로그램이 바로 그 해결책이었다. 해결책의 시초는

iframe 보안 문제 우회 및 해결법 1

주제 : iframe, http header 이해과정의 서술 (보안에 대해 쬐금 알게 된것도 ㅎㅎ) 목적: 힘들게 알아보았던 과정을 다시 잊어버리지 않기위한 복기 및 다른 사람들에게 알리는 것 현재 진행하고 있는 프로젝트의 가장 핵심이라고 볼 수 있는 기능을 구현함에 있어 어려움에 부딪혔다.

Stored XSS in Yahoo!

Sharing is Caring :) When we share, we open doors to a new beginning...../ Well, This is Shahzada Al Shahriar Khan. And I am from Bangladesh. Now I am going to share

XSS vulnerability

Expected behavior When clicking on links, refering steempayout.com I dont expect any xss vulnerabilities. Actual behavior There is the possibility to inject javascript