Xenotix

Advanced Open Source Cross Site Scripting (XSS) Detection and Exploitation Framework. Powered by @OpenSecurity_IN. We tweet latest on #xss

[Xenotix @Xenotix]

Vote for @Xenotix http://t.co/oHJnBTWlZR
In 2013, we were the top 5th tool.
This is how you Support Free & OpenSource softwares.
Please RT.

[OpenSecurity @OpenSecurity_IN]

If you liked Mobile Security Framework - MobSF, do vote for us at #BlackHat Top 10 Arsenal Tools https://t.co/ZoRwEHGryD
#MobileSecurity

[Xenotix @Xenotix]

@noise503 Here: OWASP Xenotix XSS Exploit Framework Tutorial Series: https://t.co/cQheh9aIY7
Between the project is not maintained anymore.

[blueclosure @blueclosure]

JS Security Awareness - We just published the first article! #javascript @blueclosure Read it here: https://t.co/kPS1iLWbNN

[XSS Payloads @XssPayloads]

DOM based Angular sandbox escapes by @garethheyes
https://t.co/4YH6Iwq9Sl
Just great !

[XSS Payloads @XssPayloads]

Nice one by @garethheyes
open('','_self').alert(1)

[Gareth Heyes \u2028 @garethheyes]

[self.alert(1)] #mavo

[Bea Hughes @beajammingh]

By using a specially crafted input, it is possible under the right conditions to trick Imagemagick in to processing images, rather than | sh

[Xenotix @Xenotix]

@abhijeth @brutelogic Check this FB post for comparisons
https://t.co/aKq12GHtk0

[Xenotix @Xenotix]

Glad to see Xenotix quoted in notable academic research. We would like to thank the community for all the love... https://t.co/qYDLVNIOVT

[Ben Sadeghipour @NahamSec]

When Bypassing JSON Encoding, XSS Filter, WAF, CSP, and Auditor turns into 8 Vulnerabilities on @Airbnb w/@bbuerhaus https://t.co/A9H7lDbG2J

[Ajin Abraham @ajinabraham]

If you are using startbootstrap-clean-blog, there is a DOM XSS.
Here is a patch: https://t.co/pYFOKILDBC

[XSS Payloads @XssPayloads]

Dwitter, the JS social network.
https://t.co/U9MpqUWSUF
Embelish your payloads !

[XSS Payloads @XssPayloads]

IE detection payload by @garethheyes
try{!/\s/.test('\u0085')&&eval('\u0085alert("IE")')}catch(e){alert('Not IE')}
Proves Edge != IE ...

[azu @azu_re]

XSS via a spoofed React element https://t.co/K5tWcLEiPa

[Tal Be'ery @TalBeerySec]

The #XSS reported by @taviso as an enabler for the attack on @Cisco @WebEx #chrome extension 1.0.5 is still alive.
https://t.co/mfecAGozIi

[x0rz @x0rz]

CVE-2017-2361: MacOS X HelpViewer XSS leads to arbitrary file execution and arbitrary file read https://t.co/2MmzTp0pW6 #vulnerability

[Masato Kinugawa @kinugawamasato]

This is the demo for CVE-2016-7239, which is one of my favorite findings in 2016. I'll post details later :D
https://t.co/HEvSZKYTl0

[Xenotix @Xenotix]

Fighting XSS with 🛡 Isolated Scripts

https://t.co/PK71gpZ6JX

[IMMUNIO @immunio]

Today at 1:00pm EST we're talking #AppSec and #XSS attack with @manicode. Join us for the free webinar. https://t.co/9CHTutb0kr