New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dom-xss-web-message.yaml #1

Open

pookie-magarmach wants to merge 1 commit into JoshMorrison99:main from pookie-magarmach:patch-1

pookie-magarmach commented Apr 8, 2023

there is an error in which is being fixed by me


          Update dom-xss-web-message.yaml

2fba0ed

Owner

JoshMorrison99 commented Aug 10, 2023

Thank you for reviewing, but this is not an error. The template is searching for web messages which are usually in the form:

window.addEventListener('message', function(e) {

By searching for just window.addEventListener('message', I'm able to check if a web message is on the page.

If you are searching for postMessage based bugs, I highly recommend this extension. It will help out a lot. https://github.com/fransr/postMessage-tracker

I have an example of how I used it on a Portswigger lab writeup here: https://shelled.io/writeups/portswigger/dom-xss-using-web-messages.html

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet