Home (22)
Review (4)
Analysis (4)
Note (8)
PLAYBOOK (6)
WRITE-UP (80)
Tags (100)
2026
[WRITE-UP] PORTSWIGGER - REFLECTED XSS PROTECTED BY CSP, WITH CSP BYPASS
Jun 8
[WRITE-UP] PORTSWIGGER - REFLECTED XSS PROTECTED BY VERY STRICT CSP, WITH DANGLING MARKUP ATTACK
Jun 8
[WRITE-UP] PORTSWIGGER - REFLECTED XSS IN A JAVASCRIPT URL WITH SOME CHARACTERS BLOCKED
Jun 8
[WRITE-UP] PORTSWIGGER - REFLECTED XSS WITH EVENT HANDLERS AND HREF ATTRIBUTES BLOCKED
Jun 7
[WRITE-UP] PORTSWIGGER - REFLECTED XSS WITH ANGULARJS SANDBOX ESCAPE AND CSP
Jun 7
[WRITE-UP] PORTSWIGGER - REFLECTED XSS WITH ANGULARJS SANDBOX ESCAPE WITHOUT STRINGS
Jun 7
[WRITE-UP] PORTSWIGGER - REFLECTED XSS INTO A TEMPLATE LITERAL WITH ANGLE BRACKETS, SINGLE, DOUBLE QUOTES, BACKSLASH AND BACKTICKS UNICODE-ESCAPED
Jun 6
[WRITE-UP] PORTSWIGGER - REFLECTED XSS INTO A JAVASCRIPT STRING WITH ANGLE BRACKETS AND DOUBLE QUOTES HTML-ENCODED AND SINGLE QUOTES ESCAPED
Jun 5
[WRITE-UP] PORTSWIGGER - REFLECTED XSS INTO A JAVASCRIPT STRING WITH SINGLE QUOTE AND BACKSLASH ESCAPED
Jun 5
[WRITE-UP] PORTSWIGGER - REFLECTED XSS IN CANONICAL LINK TAG
Jun 5
[WRITE-UP] PORTSWIGGER - REFLECTED XSS WITH SOME SVG MARKUP ALLOWED
Jun 4
[WRITE-UP] PORTSWIGGER - REFLECTED XSS INTO HTML CONTEXT WITH ALL TAGS BLOCKED EXCEPT CUSTOM ONES
Jun 4
[WRITE-UP] PORTSWIGGER - REFLECTED XSS INTO HTML CONTEXT WITH MOST TAGS AND ATTRIBUTES BLOCKED
Jun 4
[WRITE-UP] PORTSWIGGER - REFLECTED DOM XSS
Jun 3
[WRITE-UP] PORTSWIGGER - REFLECTED XSS INTO A JAVASCRIPT STRING WITH ANGLE BRACKETS HTML ENCODED
Jun 3
[WRITE-UP] PORTSWIGGER - REFLECTED XSS INTO ATTRIBUTE WITH ANGLE BRACKETS HTML-ENCODED
Jun 2
[WRITE-UP] PORTSWIGGER - REFLECTED XSS INTO HTML CONTEXT WITH NOTHING ENCODED
Jun 1