We continue to explore DOM based vulnerabilities caused by improper handling of web messages. This is the third of three Portswigger labs on the topic of web messages. The title of this lab is "DOM XSS Using Web Messages and JSON.parse.


Support This Channel
======================

Please like and subscribe, it means a lot!

Please buy me a coffee so I can continue to make content.
[ Ссылка ]

Join our Discord
[ Ссылка ]


00:00 Intro
00:35 Exploring the Lab
01:22 JavaScript Analysis
07:04 Generating Proof of Concept
10:32 Writing the Exploit
13:34 Solving the Lab
14:24 Conclusions

свернуть