Scratching the surface of host headers in Safari
Scratching the surface of host headers in Safari
Safari
Solutions to the Twins of Ten XSS Challenge
A couple of weeks ago I put up a small challenge for a specific XSS problem, called Twins of Ten. The idea was to find a payload that was limited to ten characters, these characters would repeat once and you could expand it to how many pairs you wanted. The challenge was to both find the shortest payload but also find a way around the XSS Auditor inside Chrome / Safari.