fleur

just your friendly neighborhood skid | she/her

[fleur @pastelfleurs]

@elchefe ❤️

[fleur @pastelfleurs]

@TomNomNom @intigriti Great video, thanks for posting this! I was stuck trying to figure out how to get window.origin to delete for the longest time

[fleur @pastelfleurs]

@stokfredrik Yeah, and I tend to find that ctf’s force me to learn more about topics/techniques I’m totally unfamiliar with where as in bug bounty I’m usually looking for bugs that I’m already experienced with

[fleur @pastelfleurs]

@thehackerish @adamtlangley This looks awesome, definitely going to pick up a copy!

[fleur @pastelfleurs]

@shehackspurple If anyone knows about a good class or training course specifically focusing on more advanced xss exploitation topics, I’d love to hear about it. I’m trying to find something around the difficulty level of the https://t.co/62s74DXl5l challenges if possible

[fleur @pastelfleurs]

@Cyber_Cox Cuban food and the Buena Vista Social Club documentary

[fleur @pastelfleurs]

@lynerc I always enjoy when the writer includes things they tried that didn’t work and why (esp for ctf write-ups). Really helps me understand how to approach solving similar problems in the future

[fleur @pastelfleurs]

@shehackspurple If anyone has experience with solving some of the tougher xss ctf challenges (like the stuff bugpoc and integriti has been putting out lately), I’d love some advice on improving at xss exploitation

[fleur @pastelfleurs]

@elchefe Congrats!

[fleur @pastelfleurs]

@SecurityMB Awesome to see an xss specific training course, I’ll definitely be signing up!

[fleur @pastelfleurs]

@Viking_Sec PortSwigger’s web security academy is pretty top notch for web stuff

[fleur @pastelfleurs]

@insertScript Do you know whats happening with the iframe if the foreignobject tags aren’t used? Final solution still seems to work without foreignobject tags but the iframe itself just isn’t rendered

[fleur @pastelfleurs]

@daeken ❤️

[fleur @pastelfleurs]

@terjanq Thanks for the write up, learned a ton from this!

[fleur @pastelfleurs]

@apiratemoo Hyland Software is hiring for several positions on the AppSec team (penetration tester, security engineer) and I believe all are open to full remote:

https://t.co/aixQZn04hE

[fleur @pastelfleurs]

@sloppyjoshm @Cyber_Cox Hyland Software is hiring for a senior penetration tester on the AppSec team:
https://t.co/fjul2IvD5x

[fleur @pastelfleurs]

@SoSplush Donated, thanks for posting this