667 reputation
514
bio website
location
age
visits member for 2 years, 6 months
seen Dec 21 at 14:55

Just a person.


Jun
13
awarded  Yearling
Jun
2
revised Security consequence of Javascript hole in an online chat?
Fixed post title.
Jun
2
awarded  Teacher
Jun
2
suggested approved edit on Security consequence of Javascript hole in an online chat?
Jun
1
answered Security consequence of Javascript hole in an online chat?
May
31
accepted Why does this XSS vector work in svg but not in HTML?
May
30
revised Why does this XSS vector work in svg but not in HTML?
added 2 characters in body
May
30
asked Why does this XSS vector work in svg but not in HTML?
Apr
25
comment Dom xss posibility question?
Thanks you , now I can implement it in code. And thanks for links , I tried Dominator but got nothing, but tools make mistake so I asked.
Apr
25
accepted Dom xss posibility question?
Apr
25
asked Dom xss posibility question?
Apr
12
accepted What are good tools for CRLF discovery?
Apr
12
accepted What are correct steps to setup this exploit execution(jboss_invoke_deploy)?
Apr
11
revised What are good tools for CRLF discovery?
Added some text.
Apr
11
comment What are good tools for CRLF discovery?
this acunetix.com/websitesecurity/crlf-injection
Apr
11
asked What are good tools for CRLF discovery?
Mar
3
asked What are correct steps to setup this exploit execution(jboss_invoke_deploy)?
Mar
2
comment Is it possible to exploit XSS inside User-Agent header?
Thanks , seems like there is no way , now . I've downloaded the tool and downgraded my flash player , just to test it.It works great.Thanks
Mar
2
accepted Is it possible to exploit XSS inside User-Agent header?
Mar
2
comment Is it possible to exploit XSS inside User-Agent header?
There is a cross site scripting on mobile version of that site , it is showing my user-agent inside source code.So when I use temper data I can change user-agent to "><script>alert(0)</script> and crate javscript alert. But how to request for that page with spoofed user-agent without need to use temper data?