Widgets Gone Wild Exploiting Xss Through Flawed Postmessage Origin Checks

René de Sain – renniepak - NahamCon 2025 Link to the slides: https://0-a.nl/nahamcon/

In this episode, we dive into one of the most ignored client-side vulnerability classes:

See: https://blog.nintechnet.com/how-hackers-

https://www.instagram.com/p9xw.

It's possible for an attacker to achieve

3000$ Bug Bounty Rewards from Microsoft Forms: How I Discovered a Reflected

In this live bug bounty

https://www.instagram.com/p9xw.

All demonstrations are intended solely for lawful, ethical, and defensive use. The creator assumes no liability for actions viewers ...

This video is Part 2 of our HTML5 security presentation. In this series we discuss the common security

Most people look for

Disclaimer This video is intended strictly for educational purposes. All techniques demonstrated should be used responsibly and ...

The following video demonstrates a

https://www.instagram.com/p9xw.

Join us as we dive into the world of