Here's Cursor finding a DOM XSS via Chrome #bugbounty

I'm excited 🎉 to introduce JSSCM! A browser extension... that detects expired domains for Stored XSS. So you can find XSS and earn money while casually browsing. I've earned $5K+ in bounties with this extension. Check it out #BugBounty #OpenSourceshow more

I made a Chrome extension that turns localhost into... a visual editor for Cursor. Click any element on your dev site → describe what you want changed → it automatically sends the edit request to Cursor in the background with the element context. Here's how it works...show more

CVE-2023-20593 — Exploiting Zenbleed from Chrome This repository contains... a proof-of-concept for exploiting Zenbleed from Chrome using a V8 vulnerability which enbles arbitrary code execution in the renderer process. Details: #cybersecurity #pentesting #redteam #bugbountyshow more

*** KNOXSS GIVEAWAY June 2025 *** Directions: 1. Like... 2. Share 3. Be a follower Prize: KNOXSS Pro for 1 Month Results: June 10th Number of Winners: 3 Good luck! 😀 - #XSS for pros. #BugBounty #PenTestingshow more

We've been working hard on the experimental Node#moveBefore() API... to preserve DOM state across element moves & reparenting. Here's a demo working with CSS animations & iframes! Try it out in Chrome Canary at We'd love your feedback! cc: Noam Rosenthal 🦋 nomster.bsky.socialshow more

Race Condition + Host Header Injection + Redis(Cache)= Zero... Click XSS The first attempts were not successful and the reflect was not observed, but using the RACE, I saw that my sampler is displayed for the rest of the users 🫥 I will publish it after permission. #BugBountyshow more

build custom agents with the cursor sdk! here's a... kanban board for your agents, more examples in our cookbook repo:show more

A fan finding one of Harry’s favourite restaurants in... Japan! (via bazartbandofficial)show more

How to find XSS in 2024!

Chrome 146 is stable 🚀 We’re shipping features that... move more logic out of your JavaScript and into the browser → ✨ Scroll-triggered animations (declarative CSS!) 🛡️ The Sanitizer API for XSS-free apps 🧩 Scoped custom element registriesshow more

Dom Lucre | Breaker of Narratives Here's the video

🔐 Certificate Ripper A CLI tool to extract server... certificates #cybersecurity #pentesting #bugbountyshow more

Since some people don't believe you can lose cursor... and fail Garen flash R Here's me losing cursor, missing R (even without flash!) and giving 1k shutdown in top 0.5% gameshow more

Here's a clip of a successful pump fake in... CFB26 (via Eric Ray )show more

DOM W/ THE DUNK (via breezebasketballclub / ig)

You can run full browser automations for AI agents... without worrying about Chrome, Puppeteer, or infrastructure. Steel is an open-source browser API that wraps Chrome, manages sessions, handles proxies, and exposes everything via a REST API or SDKs.show more

A massive competitor to Cursor, Lovable, Replit just came... out 🤯 Orchids is a new AI app builder that builds any app, any stack: → Web apps, mobile, chrome extension, slack bot… → Use your ChatGPT, Claude Code, Gemini subscription “Make a fully personal bloomberg terminal”show more

no more doubts, here's my verification video #dom #findom... #femdom #finsubshow more