Somdev Sangwan (s0md3v) - Security Researcher
Somdev Sangwan Hacker & Maker Est. 2017 Has brain Has taste experience +obsession +screentime 
about 
~/projects 74,476stars on github 110k+downloads a month 
blog papers 
Bypassing XSS Detection Mechanisms — Somdev Sangwan Abstract This paper proposes a well-defined methodology to bypass Cross Site Scripting (XSS) security mechanisms by making assumptions about the rules being used to detect malicious strings by sending probes and crafting payloads based on the assumptions. The proposed methodology consists of three phases: determining payload structure, probing and obfuscation. Determining various payload structures for a given context provides a precise idea of the optimal testing approach. The next phase, probing, involves testing various strings against the target's security mechanisms. The target's responses are analyzed in order to make assumptions based on the analysis. Finally, obfuscation and other tweaks are made to the payload if required. About the Author Hacker. To the Reader The author assumes that the reader has at least basic level knowledge of Cross Site Scripting, Hypertext Markup Language (HTML) and JavaScript. {string} is used throughout the paper to represent components of a payload scheme. {?string} represents an optional component. The word primary character refers to a character which must be included in a payload. It is advised to URL encode URL unsafe characters such as + and & before using them in payloads. While probing, a harmless string should be used instead of {javascript}. 
philosophy 
playground 
recommendations what i use 
L R 
