Client-Side
Test for client-side vulnerabilities across modern web applications and SPAs.
Techniques
| Type | Key Vectors |
|---|---|
| XSS | Reflected, Stored, DOM-based, framework-specific (React, Vue, Angular) |
| CSRF | Token bypass, SameSite cookie bypass, cross-origin requests |
| CORS | Misconfigured origins, null origin, wildcard credentials |
| Clickjacking | Frame-based, drag-and-drop, multi-step |
| DOM-based | DOM sinks, source/sink analysis, JavaScript URL schemes |
| Prototype Pollution | Client-side gadgets, server-side pollution, property injection |
Workflow
- Identify input sources and data flows
- Classify sink contexts (HTML, attribute, URL, JS, CSS)
- Enumerate defenses (encoding, CSP, sanitizers, Trusted Types)
- Craft context-appropriate payloads
- Validate execution and demonstrate impact
- Document with reproduction steps and remediation
Reference
reference/xss*.md- XSS bypass techniques and exploitationreference/csrf*.md- CSRF techniques and bypassesreference/cors*.md- CORS misconfiguration testingreference/clickjacking*.md- Clickjacking techniquesreference/dom*.md- DOM-based vulnerability testingreference/prototype-pollution*.md- Prototype pollution techniques