Categoría: writeups

Blind OS command injection with time delays

CORS vulnerability with trusted null origin

CORS vulnerability with basic origin reflection

DOM-based cookie manipulation

DOM XSS using web messages and JSON.parse

DOM XSS using web messages and a JavaScript URL

DOM XSS using web messages

SameSite Strict bypass via client-side redirect

SameSite Lax bypass via method override

CSRF where token is duplicated in cookie