Jorian on Mythryl: “I won't keep you in mystery any longer, here's how I found an XSS…”

I won't keep you in mystery any longer, here's how I found an XSS vulnerability *in* Shazzer! The chain involved some interesting browser techniques no sane developer could foresee. Check out the details below: jorianwoltjer.com/blog/p/stori... (and thanks @garethheyes.co.uk for making Shazzer!)

jorianwoltjer.comFinding XSS on Shazzer (literally) | Jorian WoltjerHow I found an XSS in Shazzer, a tool for discovering and sharing browser quirks through fuzzing. Not *using*, but *in* Shazzer. We'll explore some useful techniques with Blob URLs to unsandbox malici...

Gareth Heyes@garethheyes.co.uk

Just want to say @jorianwoltjer.com is awesome. You'll find out why soon...

28/5/26, 7:09 am6 reposts10 likes

Post