ãƒã‚°ãƒã‚¦ãƒ³ãƒ†ã‚£ã«ãŠã‘ã‚‹ XSS ã®å…·ä½“çš„ãªè„…å¨ã®äº‹ä¾‹ã¾ã¨ã‚ - blog of morioka121. 始ã‚ã« ã“ã‚“ã«ã¡ã¯ã€morioka12 ã§ã™ã€‚ 本稿ã§ã¯ã€ãƒã‚°ãƒã‚¦ãƒ³ãƒ†ã‚£ã§å®Ÿéš›ã«ã‚ã£ãŸè„†å¼±æ€§å ±å‘Šã®äº‹ä¾‹ã‚’ã‚‚ã¨ã«ã€XSS ã®å…·ä½“çš„ãªè„…å¨(Impact)ã«ã¤ã„ã¦ã„ãã¤ã‹ç´¹ä»‹ã—ã¾ã™ã€‚ 1. 始ã‚ã« å…è²¬äº‹é … 想定èªè€… 2. XSS (Cross Site Scripting) HackerOne Top 10 Vulnerability Types Escalation (Goal) 3. XSS ã®è„…å¨ (Impact) 3.1 Response Body ã‹ã‚‰ Session ID ã®å¥ªå– 3.2 Local Storage ã‹ã‚‰ Access Token ã®å¥ªå– 3.3 IndexedDB ã‹ã‚‰ Session Data ã®å¥ªå– 3.4 メールアドレスã®æ”¹ã–ã‚“ 3.5 パスワードã®æ”¹ã–ã‚“ 3.6 管ç†è€…アカウントã®æ‹›å¾… 3.7 POST Based Reflected XSS 4.
ã€PoC編】XSSã¸ã®è€æ€§ã«ãŠã„ã¦ãƒ–ラウザã®ãƒ¡ãƒ¢ãƒªç©ºé–“æ–¹å¼ã¯Local Storageæ–¹å¼ã‚ˆã‚Šå®‰å…¨ã‹ï¼Ÿ - Flatt Security Blog
GitHub - shhnjk/cursed_types: List of Trusted Types bypasses
New XSS vectors
XSSã®è„…å¨ã‚’考察ã™ã‚‹ - ã‚»ã‚ュアスカイプラス
開発者ãŒçŸ¥ã£ã¦ãŠããŸã„「XSSã®ç™ºç”ŸåŽŸç†ä»¥å¤–ã€ã®è©± - Flatt Security Blog
Trusted Typesã®æ¦‚念ã¨èƒŒæ™¯
HTML Sanitizer API
HTML Sanitizer API Playground
Eliminating XSS from WebUI with Trusted Types
Cheatsheet: XSS that works in 2021
GitHub - oskarsve/ms-teams-rce
https://wicg.github.io/purification/
Chrome Platform Status
blink-dev › Intent to Prototype: Sanitizer API | Google グループ
The Curious Case of Copy & Paste - on risks of pasting arbitrary content in browsers - research.securitum.com
GitHub - orchitech/gfm-escape: The only Markdown escaper passing backtranslation tests.
markedã§å®‰å…¨ã«Markdownã‹ã‚‰HTMLを生æˆã™ã‚‹safe-marked
One XSS cheatsheet to rule them all
Killing ðŸ¦with ðŸ›ðŸ›
{{#tags}}- {{label}}
{{/tags}}