#xss

• 2016-08-19 An Azure zero-day XSS with sandbox escape Chaining a command injection into a stored XSS that jumps from a compromised SaaS site to the Azure administrator through the Kudu console.
• 2014-12-04 Finding zero-day XSS through document metadata Embedding XSS payloads in EXIF and document metadata, and using the technique to find zero-days in image-sharing sites and WordPress.
• 2012-10-06 XSS explained The three ways to deliver a Cross-Site Scripting payload, the attack vectors that make it dangerous, and a short history of XSS in the wild.

all tags →