XSSpecter
Peer-reviewed conference paper
Research
Evidence, systems, and the notes between them.
I investigate web, API, and browser security through authorized testing, independent research, tooling, and public technical writing.
Research archive lens
Public artifacts, held in one field of view.
The lens surfaces papers, tools, notes, and labs without exposing private targets, payloads, or report material.
Intigriti 1025 RCE Challenge
Challenge writeup
Client-Side Path Traversal to JSONP-Based XSS
Web security technique
XSSpecter
Open-source software
bcollabtodiscord
Open-source software
Reflector
Open-source fork
Complete index
Papers, techniques, tools, labs, and notes.
Older writing is preserved in its original context and clearly marked as archival material.
01
Research
1 recordClient-Side Path Traversal to JSONP-Based XSS
A client-side path traversal primitive becomes script execution when it reaches a same-origin JSONP-capable endpoint. The chain was independently catalogued by Doyensec.
Independent security research