KRY·Jan 19Lab: Stored XSS into onclick event with angle brackets and double quotes HTML-encoded and single…Description
KRY·Dec 29, 2025Lab: Reflected XSS into HTML context with all tags blocked except custom onesDescription
KRY·Dec 29, 2025Lab: Reflected XSS into HTML context with most tags and attributes blockedDescription
KRY·Dec 19, 2025Lab: DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encodedDescription
KRY·Dec 19, 2025Lab: DOM XSS in document.write sink using source location.search inside a select elementDescription
KRY·Dec 9, 2025Lab: DOM XSS in jQuery anchor href attribute sink using location.search sourceDescription