HTML Universal Identifier

PDF Files for Pentesting

'>"><img src=x onerror=alert(1) /><b>asd</b>

A POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension.

Awesome MXSS ??

Source code for Research on Browser Tracking Protection Bypass

Storybook is the industry standard workshop for building, documenting, and testing UI components in isolation

Simple "postMessage logger" Chrome extension

CSPT is an open-source Burp Suite extension to find and exploit Client-Side Path Traversal.

The open LMS by Instructure, Inc.

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

A tech blog about Front-end, JavaScript and Security

Asset inventory of over 800 public bug bounty programs.

Proof-of-concept codes created as part of security research done by Google Security Team.

Cross domain local storage, with permissions

Browser's XSS Filter Bypass Cheat Sheet

CSS injection requires an attacker to load a standalone CSS file to leak HTML tag attributes.

An HTTP/1.1 client, written from scratch for Node.js

Roadmap to get started in Infosec for absolute begineer

Some bash scripts that are useful when performing research on Google's Cloudshell

A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations.