Skip to content

Instantly share code, notes, and snippets.

View osamahamad's full-sized avatar
🏴

Osama Hamad osamahamad

🏴
View GitHub Profile
@BlackFan
BlackFan / Bootstrap_XSS.md
Last active November 4, 2024 03:40
Bootstrap XSS Collection

CVE-2019-8331

Bootstrap < 3.4.1 || < 4.3.1

✔️ CSP strict-dynamic bypass

➖ Requires user interaction

➖ Requires $('[data-toggle="tooltip"]').tooltip();

# ci/cd varibles:
# 1. DEFECTDOJO_URL (not masked)
# 2. DEFECTDOJO_TOKEN (masked)
# 3. DEFECTDOJO_PRODUCTID (not masked)
include:
- template: Security/Secret-Detection.gitlab-ci.yml
- template: Security/SAST.gitlab-ci.yml
- template: Security/Container-Scanning.gitlab-ci.yml