XSSpecter
Peer-reviewed conference paper
Research
Evidence, systems, and the notes between them.
I investigate web, API, and browser security through authorized testing, independent research, tooling, and public technical writing.
Research archive lens
Public artifacts, held in one field of view.
The lens surfaces papers, tools, notes, and labs without exposing private targets, payloads, or report material.
Intigriti 1025 RCE Challenge
Challenge writeup
Client-Side Path Traversal to JSONP-Based XSS
Web security technique
XSSpecter
Open-source software
bcollabtodiscord
Open-source software
Reflector
Open-source fork
Complete index
Papers, techniques, tools, labs, and notes.
Older writing is preserved in its original context and clearly marked as archival material.
01
Tools
5 recordsXSSpecter
Blind-XSS workflow automation
The open-source implementation accompanying the IEEE paper, with CLI discovery and a callback-management server.
Creator and maintainer
GitHub
bcollabtodiscord
Burp Collaborator notifications
A focused utility that forwards Burp Collaborator client interactions into a Discord workflow.
Creator
GitHub
filter-waf
WAF-aware URL processing
A small Go utility for processing URL lists and separating WAF-protected targets during authorized reconnaissance.
Creator
GitHub
ezxss-callback-handler
Callback processing utility
A compact PHP handler for processing callbacks from an authorized blind-XSS workflow.
Creator
GitHub
getallips
Domain and origin-IP research
A utility for collecting IP addresses historically or currently associated with a domain during authorized testing.
Creator
GitHub
02
Contributions
1 recordReflector
Forked Burp extension
A maintained fork of a Burp extension for identifying reflected input while browsing. Presented as a contribution, not original authorship.
Fork and contribution
GitHub