Client Side Testing

DOM-based Cross-Site Scripting

JavaScript Execution

HTML Injection

Client-Side URL Redirect

CSS Injection

Client-Side Resource Manipulation

Cross-Origin Resource Sharing

Cross-Site Flashing

Clickjacking

<!DOCTYPE html>
<html>

<head>
    <title>Clickjacking PoC</title>
</head>

<body>
     <iframe src="{{domain}}" width="500" height="500"></iframe>
</body>

</html>

WebSockets

Web Messaging

Local Storage