⤷ Title: DOM XSS using web messages
════════════════════════
𐀪 Author: Mubin mujawar
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 10:51:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #xss_vulnerability #portswigger #javascript #web_security
════════════════════════
𐀪 Author: Mubin mujawar
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 10:51:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #xss_vulnerability #portswigger #javascript #web_security
Medium
DOM XSS using web messages
Exploiting an Unchecked postMessage Listener — DOM XSS Using Web Messages (PortSwigger Academy)
⤷ Title: How a JavaScript file led me to an Admin Access
════════════════════════
𐀪 Author: Said-Abbosxon Nabijonov | 0trc
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 09:05:14 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #infosec #pentesting #javascript
════════════════════════
𐀪 Author: Said-Abbosxon Nabijonov | 0trc
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 09:05:14 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #infosec #pentesting #javascript
Medium
How a JavaScript file led to an Admin Access
During a pentest I found a JavaScript file that led to me an API with exposed Swagger. Once account creation later I was an Admin.