Skip to main content
EdOverflow's user avatar
EdOverflow's user avatar
EdOverflow's user avatar
EdOverflow
  • Member for 5 years, 6 months
  • Last seen more than a week ago
20 votes
Accepted

Is Stylish safe to use again?

9 votes
Accepted

Injecting <script>alert("1")</script> to OWASP Juice shop doesn't work

6 votes

How can I exploit a XSS vulnerability which doesn't allow me to type < and > symbols and puts my input in double quotes?

6 votes
Accepted

What can be done with Blind SSRF?

5 votes

Why do several bug bounties ignore user enumeration?

4 votes
Accepted

How can a git repository be sanitized efficiently and effectively?

4 votes
Accepted

How do web browsers detect XSS attempts when the X-XSS-Protection header is enabled?

3 votes

What are the common features to identify XSS attack from Apache log file?

3 votes

Can Arbitrary Code Execution be done using CSS Injection?

3 votes

What is the XSS auditor in Chrome/Firefox and how do I find bypasses?

3 votes
Accepted

How can I determine the vulnerability for a sub domain takeover attack?

2 votes

Is it a security defect to display the secure api_key in travis.yml file of source code of a web application in Github

2 votes

Can an HTTPS server accidentally leak its private key?

2 votes
Accepted

XSS in custom, user-supplied CSS

2 votes
Accepted

Does having in-browser password managers further the risks of successful CSRF attacks?

2 votes

RSA generating private and public keys

2 votes

Blind XSS via cookie?

1 vote
Accepted

What's the relation between a Security Framework & Standards, Guidelines, Procedures and Policies?

1 vote

Vulnerability management and assessment tracking solutions

1 vote

Prevent external script from loading using Burp

1 vote

Exploiting XSS in jQuery without equal character?

1 vote
Accepted

XSS - will javascript execute in anchor tag where "/" by default added by server in href

1 vote

Exploit: Send cookie to another server from url

1 vote

CSRF methods: img vs iframe vs form/javascript

1 vote
Accepted

Prevent javascript cross-origin write

1 vote

Is this code vulnerable to DOM based XSS jquery animate?

1 vote

Found how to get Oauth2 client_id along matching secret but redirect_uri is whitelisted as requirement. Is it still safe?

0 votes

Is this code vulnerable to dom based XSS?

0 votes

Is the following javascript code vulnerable to DOM XSS?

0 votes

XSS: Code payload gets displayed on the screen as a string