Back to directory
WRITEUP #6284

Escalating XSS in PhantomJS Image Rendering to SSRF/Local-File Read

XSSSSRFLFI
by@bbuerhaus(Brett Buerhaus)
Program
-
Published
Jun 29, 2017
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://buer.haus/2017/06/29/escalating-xss-in-phantomjs-image-rendering-to-ssrflocal-file-read/
▸ RELATED WRITEUPS
IIS welcome page to source code review to LFI!
SSRFLFI
Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!
RCEConfusion attack
Canary Token OSS Security Audit Report (Q2 2024)
XSSDoS
Directory Traversal, SQL Injection and Server-Side Request Forgery
SQL InjectionPath traversal
Self-XSS to ATO via Site Features
XSSSelf-XSS

Built with ❤️ by Shubham Rawat