What is Detectify?

XSS

What’s your go-to bug class? Is it XSS? One could say cross-site scripting is a favourite among our researchers. Check it out:

How To Hack Web Applications in 2022: Part 2

bug bounty Detectify Detectify Crowdsource Ethical Hacking hakluke XSS
Popular tags XSS Detectify Crowdsource Frans Rosén bug bounty Detectify
bug bounty Detectify Crowdsource Frans Rosén OAuth postmessage XSS

Account hijacking using “dirty dancing” in sign-in OAuth-flows

Frans Rosén / July 6, 2022
Detectify Ethical Hacking hacking web apps XSS

How To Hack Web Applications in 2022: Part 1

May 16, 2022
Get research and tips from Detectify security experts and the Crowdsource hacker community Subscribe to the Detectify Monthly Round-up
0-day CVE Detectify Crowdsource XSS

CVE-2020-29653: Stealing Froxlor login credentials using dangling markup

March 10, 2021
host headers password managers Safari XSS

Scratching the surface of host headers in Safari

Linus Särud / April 4, 2018
Chrome Chrome extensions Facebook Frans Rosén XSS

Dissecting the Chrome Extension Facebook malware

August 31, 2017
Tesla XSS

How we invented the Tesla DOM DOOM XSS

July 27, 2017
AWS bug bounty Frans Rosén privacy XSS

A deep dive into AWS S3 access controls – taking full control over your assets

July 13, 2017
Detectify Crowdsource Persistent XSS Team Tailor XSS

How I found a persistent XSS affecting thousands of career sites

June 28, 2017
Frans Rosén Slack XSS

Using Chrome’s web-custom-data UTI to inject a stored XSS in Slack

September 1, 2016
What is Detectify? Subscribe to newsletter Sign up for a free trial »
A security service for developers.