Black Hat·48 min
Engineers explore architecture and security mechanisms for Breaking XSS Mitigations Via Script Gadgets.
xssmitigationsbreaking+3
xss
64 talks tagged with this topic.
Filters+
Loading filters…
1–24 of 64 talks · loading…
Black Hat·55 min
Security researchers examine technical aspects of Call To Arms: A Tale of the Weaknesses of Current Client-Side XSS Filtering.
xsscallarm+3
Black Hat·1 hr 1 min
Security researchers examine technical aspects of Client-Side Protection Against DOM-Based XSS Done Right (tm).
xssclient-sideprotection+2
Black Hat·33 min
Gareth Heyes
Security researchers examine technical aspects of Portable Data exFiltration: XSS for PDFs.
xssexfiltrationdata-exfiltration
Black Hat·1 hr 2 min
Presenters detail vulnerability discovery and exploitation in Revisiting XSS Sanitization.
xssrevisitingsanitization
Black Hat·28 min
Nera W. C. Liu · Albert Yu
Analysts investigate attack surfaces and defenses concerning Ultimate Dom Based XSS Detection Scanner on Cloud by Nera W. C. Liu & Albert Yu.
xssdetectionultimate+3
Black Hat·27 min
Analysts investigate attack surfaces and defenses concerning USA 2013 - The Web IS Vulnerable: XSS Defense on the BattleFront.
webxssvulnerable+2
BlueHat India 2025·27 min
Security researchers examine technical aspects of Breaking into Big Tech: The $50,000+ Blind XSS Bug Hunt.
xssbreakingblind+1
CODE BLUE·31 min
2015 explores [audio]1; mode=attack XSS Attacks By Abusing the XSS Filter by Masato Kinugawa.
xssaudiomode+3
CODE BLUE·39 min
Presenters detail vulnerability discovery and exploitation in [CB16] Electron - Build cross platform desktop XSS, it’s easier than you think by Yosuke Hasegawa.
xsselectronbuild+2
CODE BLUE·21 min
Nick Galbreath
Industry experts analyze emerging threats surrounding CodeBlue01 : libinjection: from SQLi to XSS by Nick Galbreath.
xsscodeblue01libinjection+3
Creator Stage·26 min
Jasmin Landry
Chronicles serendipitous bug bounty discoveries, from unexpected blind XSS triggers to misdirected sensitive internal data distributions.
bug-bountyappsecxss+2
Ekoparty Security Conference·28 min
Investigates #Eko2020 Bounty Hunters | Adrian Pedrazzoli: XSS de -1 a 0 and evaluates key implications for security practitioners.
xsseko2020bounty+2
Ekoparty Security Conference·1 hr
Evaluates alexander Sotirov - Blackbox Reversing of XSS Filters and evaluates key implications for security practitioners.
xssalexandersotirov+2
Ekoparty Security Conference·25 min
Ileana Maricel Barrionuevo
Investigates when giants fall: XSS in Meta through code review and evaluates key implications for security practitioners.
xsscode-reviewgiant+1
Main Stage·38 min
Zhengyu Liu · Jianjia Yu
Introduces Hulk, the first dynamic analysis tool to automatically detect and generate exploit payloads for complex DOM Clobbering vulnerabilities at web scale.
appsecdom-clobberingxss+2
nullcon·19 min
Presenters detail vulnerability discovery and exploitation in Goa 2013: Detecting & Exploiting XSS vulnerabilities.
vulnerabilitiesxssdetecting+2
nullcon·58 min
Presenters detail vulnerability discovery and exploitation in Hacking Modern Desktop apps with XSS and RCE | Abraham Aranguren | NULLCON Webinar.
rcexssmodern+3
nullcon·46 min
Engineers explore architecture and security mechanisms for The Hidden Cost Of Sanitization How Secure Parsing Can Introduce New Xss Attack Surfaces.
xsshiddencost+3
OWASP Foundation·47 min
AppSec EU 2017 Don't Trust The DOM: Bypassing XSS Mitigations Via Script Gadgets by Sebastian Lekies
Security researchers examine technical aspects of AppSec EU 2017 Don't Trust The DOM: Bypassing XSS Mitigations Via Script Gadgets by Sebastian Lekies.
xssmitigationsappsec+2
OWASP Foundation·35 min
AppSec EU15 - Frederik Braun - Using A JavaScript CDN That Can Not XSS You - With Subresource Int...
Subresource Int...
Security researchers examine technical aspects of AppSec EU15 - Frederik Braun - Using A JavaScript CDN That Can Not XSS You - With Subresource Int....
xssjavascriptcdn
OWASP Foundation·40 min
AppSecUSA 2017 examines Differences Between Web Application Scanning Tools when Scanning for XSS and SQLi.
webxssscanning
OWASP Foundation·58 min
Ksenia Dmitrieva
OWASP AppSec California 2015 explores Fixing XSS with Content Security Policy - Ksenia Dmitrieva.
policyxsssecurity-policy+1
OWASP Foundation·34 min
Nick Galbreath
Nick Galbreath analyzes libinjection: from sqli to xss.
xsslibinjectionsqli