JavaScript: Advanced DOM Manipulation Techniques

This article delves into advanced JavaScript DOM manipulation techniques for red teams and pen testers, covering various methods of accessing, modifying, and traversing the DOM, along with real-world examples demonstrating their applications in hacking scenarios.

June 8, 2023 · 7 min · UncleSp1d3r

Web Application Security: CSRF and XSS Prevention

This article explores the prevention techniques for Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS) attacks in web applications, providing real-world examples, and includes code samples in various web programming languages.

May 1, 2023 · 38 min · UncleSp1d3r

The Browser is Your Battlefield: Advanced XSS for Red Teamers

A comprehensive deep-dive into Cross-Site Scripting (XSS) from an offensive perspective. Learn to move beyond simple alert boxes to cookie theft, weaponized BeEF hooks, Blind XSS, and bypassing modern WAFs and CSPs.

February 28, 2023 · 4 min · UncleSp1d3r