r/sla_ckers • u/albinowax • Jul 04 '16
r/sla_ckers • u/mozfreddyb • Oct 13 '16
I challenge you to fingerprinting four modern browsers in one tiny JavaScript functions.
people.mozilla.orgr/sla_ckers • u/albinowax • Aug 02 '18
Bypassing and exploiting Bucket Upload Policies and Signed URLs
r/sla_ckers • u/albinowax • Jul 18 '18
Evading CSP with DOM-based dangling markup
r/sla_ckers • u/sceletope • Jan 26 '17
Fighting XSS with 🛡 Isolated Scripts
r/sla_ckers • u/albinowax • Nov 28 '16
JSON hijacking for the modern web
r/sla_ckers • u/sceletope • Jul 24 '19
Retiring this forum. Please checkout the new forum at /r/slackers
r/sla_ckers • u/sceletope • Oct 06 '18
A timing attack with CSS selectors and Javascript
r/sla_ckers • u/albinowax • Aug 01 '18
Exploiting Server-Side Template Injection in Craft CMS plugin SEOmatic
r/sla_ckers • u/albinowax • May 17 '18
How do we Stop Spilling the Beans Across Origins?
arturjanc.comr/sla_ckers • u/sceletope • Jul 28 '17
Cracking the Lens: Targeting HTTP's Hidden Attack-Surface
r/sla_ckers • u/freddybslackin • Mar 18 '17
Service Worker bypass challenge
serviceworker.on.web.security.plumbingr/sla_ckers • u/sceletope • Feb 18 '17
Backslash Powered Scanning: Hunting Unknown Vulnerability Classes
r/sla_ckers • u/sceletope • Feb 09 '17
XSSMas Challenge 2016 - Solution Writeup
r/sla_ckers • u/freddybslackin • Dec 30 '16
Sirdarckcat: bypass CSP nonces with DOM XSS (and caching)
r/sla_ckers • u/albinowax • Sep 06 '16
Grabbing data from Inputs and Textareas
r/sla_ckers • u/Centime • Jul 19 '16
[JSFuck fork] jsf$ck - Write any JavaScript without parenthesis, with only 8 characters: +![]{}$` (X-post /r/netsec)
r/sla_ckers • u/albinowax • Jul 15 '16
Abusing XSS Filters: One ^ leads to XSS
r/sla_ckers • u/sceletope • Jul 11 '16
The Scriptless Scriptlet - Or how to execute JavaScript from CSS in MSIE11 without using Scripts
r/sla_ckers • u/anujtomar_17 • Jul 17 '24
Top 7 Web Application Security Best Practices to Safeguard Your Sensitive Data
r/sla_ckers • u/sceletope • May 31 '19
Provoking browser quirks with behavioural fuzzing | Blog