I’m going to talk about XSS defense before a crowd of hackers. Can you point me to some cool XSS payloads to impress? I’m greatful for you time and will be sure to reference your majesty before the crowd.
-
This is a room full of hackers! I just want to show a few cool XSS payloads to lure them into paying attention before I get to the defense theory (escape, html sanitize, use safe JS sinks, handle JSON properly, etc)
Then on the emerging threats front, https://github.com/google/security-research-pocs/tree/master/script-gadgets … has some gems, You should find the paper there and the blackhat slides which package things nicely. Authors: @koto @slekies @sirdarckcat
-
-
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.