Hz Knowledge Base

❯

❯

❯

Jul 05, 20261 min read

<svg><animateTransform onbegin=1>

30_Lab-Reflected XSS protected by CSP, with CSP bypass
Jul 17, 2026
29_Lab29-Reflected XSS protected by very strict CSP, with dangling markup attack
Jul 12, 2026
28_Lab28-Reflected XSS in a JavaScript URL with some characters blocked
Jul 09, 2026
24_Lab24-Exploiting XSS to bypass CSRF defenses
Jul 08, 2026
25_Lab25-Reflected XSS with AngularJS sandbox escape without strings
Jul 08, 2026

[ vault ]