Here's Cursor finding a DOM XSS via Chrome #bugbounty

I'm excited 🎉 to introduce JSSCM! A browser extension... that detects expired domains for Stored XSS. So you can find XSS and earn money while casually browsing. I've earned $5K+ in bounties with this extension. Check it out #BugBounty #OpenSourceshow more

CVE-2023-20593 — Exploiting Zenbleed from Chrome This repository contains... a proof-of-concept for exploiting Zenbleed from Chrome using a V8 vulnerability which enbles arbitrary code execution in the renderer process. Details: #cybersecurity #pentesting #redteam #bugbountyshow more

*** KNOXSS GIVEAWAY June 2025 *** Directions: 1. Like... 2. Share 3. Be a follower Prize: KNOXSS Pro for 1 Month Results: June 10th Number of Winners: 3 Good luck! 😀 - #XSS for pros. #BugBounty #PenTestingshow more

I made a Chrome extension that turns localhost into... a visual editor for Cursor. Click any element on your dev site → describe what you want changed → it automatically sends the edit request to Cursor in the background with the element context. Here's how it works...show more

XSS to full account takeover and wallet drain in... Ditto. V12 found a deeplink parser bug that steals Nostr private keys with just one click. Here's how. 🧵show more

Race Condition + Host Header Injection + Redis(Cache)= Zero... Click XSS The first attempts were not successful and the reflect was not observed, but using the RACE, I saw that my sampler is displayed for the rest of the users 🫥 I will publish it after permission. #BugBountyshow more

We've been working hard on the experimental Node#moveBefore() API... to preserve DOM state across element moves & reparenting. Here's a demo working with CSS animations & iframes! Try it out in Chrome Canary at We'd love your feedback! cc: Noam Rosenthal 🦋 nomster.bsky.socialshow more

Cursor Michael Truell Sualeh Asif Aman Sanger Arvid Lunnemark... But here's what everyone misunderstands about Cursor: It's NOT just a ChatGPT wrapper. Every "magic moment" in Cursor involves custom AI models they built in-house – something they never expected to need when starting out.show more

build custom agents with the cursor sdk! here's a... kanban board for your agents, more examples in our cookbook repo:show more

A fan finding one of Harry’s favourite restaurants in... Japan! (via bazartbandofficial)show more

🔐 Certificate Ripper A CLI tool to extract server... certificates #cybersecurity #pentesting #bugbountyshow more

Chrome 146 is stable 🚀 We’re shipping features that... move more logic out of your JavaScript and into the browser → ✨ Scroll-triggered animations (declarative CSS!) 🛡️ The Sanitizer API for XSS-free apps 🧩 Scoped custom element registriesshow more

How to find XSS in 2024!

Dom Lucre | Breaker of Narratives Here's the video

DOM W/ THE DUNK (via breezebasketballclub / ig)

You can run full browser automations for AI agents... without worrying about Chrome, Puppeteer, or infrastructure. Steel is an open-source browser API that wraps Chrome, manages sessions, handles proxies, and exposes everything via a REST API or SDKs.show more