Hacking Swagger-UI - from XSS to account takeovers

We have reported more than 60 instances of this bug across a wide range of bug bounty programs including companies like Paypal, Atlassian, Microsoft, GitLab, Yahoo

Bug Bytes #170 - Evasive vulnerabilities, Hacking Swagger UI & Reverse engineering REST APIs - Intigriti

How I was able to steal users credentials via Swagger UI DOM-XSS, by Mohamed reda

The Bug Bounty Hunter – Telegram

Unauthorized Access To Admin Panel via Swagger, by M7arm4n

Web API Pentesting - HackTricks

Found +6 DomXSS at different programs (Hacking Swagger-UI), by Adham sayed (doosec101)

Bug Bounty Quick Wins: How to exploit XSS Issues on Swagger Instances., Jayesh Madnani posted on the topic

Hacking Swagger-UI - from XSS to account takeovers

Hacking Swagger-UI - from XSS to account takeovers

Found +6 DomXSS at different programs (Hacking Swagger-UI), by Adham sayed (doosec101)

Hacking Swagger-UI - from XSS to account takeovers

Hacking Swagger-UI - from XSS to account takeovers

SwaggerUI XSS vulnerability · Issue #2494 · domaindrivendev/Swashbuckle.AspNetCore · GitHub

👩‍💻IW Weekly #43: $27200 bounty from Facebook, API Misconfigurations, E2E encryption bypass, AzureAd tenant takeover, Billion dollar vulnerability and much more…

Found +6 DomXSS at different programs (Hacking Swagger-UI), by Adham sayed (doosec101)