bypass

Using Google Cloud to Bypass NoScript

NoScript is a plugin for Firefox that blocks JavaScript from executing from sites you haven’t manually trusted. This is to prevent XSS, Clickjacking and similar attacks. It’s widely known and recognized in the security community and has over 2 millions downloads at the Mozilla Addons site.

June 30, 2015

Read article

Security

5 contexts where the XSS Auditor won’t help you

While implementing a new JavaScript engine into Detectify, we discovered that the XSS auditors in modern browsers wasn’t as good at catching special cases as we thought. Considering that we had such a good response to our previous post on bypassing the Chrome XSS Auditor, we thought this would make a fitting post. But nevermind the details, let’s get to it!

April 04, 2014