Top 10 winner

(DOMinator) Finding DOMXSS with dynamic taint propagation

The Google Code home of DOMinator, Minded Security's instrumented Firefox build that finds DOM-based XSS by propagating dynamic runtime taint through JavaScript string operations. The 2010 community release targets Firefox 3.6, warns it will not run on vanilla Firefox, and points at the commercial DOMinator Pro 2012.

Record

Published by

Google Code

In the archive

• Ranked #4 in the 2011 Top 10 Web Hacking Techniques

Tags

• tooling
• dom
• xss
• dynamic-analysis
• javascript
• browser-extension
• detection
• owasp-a03-2021
• owasp-a09-2021

This page is the archive's own catalogue record. The research is the work of Google Code, first published at the original source. Preserved copies are kept so the citation survives its host.