Etiqueta: Practitioner

Blind OS command injection with time delays

DOM-based cookie manipulation

DOM XSS using web messages and JSON.parse

DOM XSS using web messages and a JavaScript URL

DOM XSS using web messages

SameSite Strict bypass via client-side redirect

SameSite Lax bypass via method override

CSRF where token is duplicated in cookie

CSRF where token is tied to non-session cookie

CSRF where token is not tied to user session