<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://webhacklist.com/</loc>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2006/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2007/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2008/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2009/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2010/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2011/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2012/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2013/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2014/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2015/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2016-17/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2018/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2019/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2020/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2021/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2022/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2023/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2024/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2025/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/2026-ai/</loc>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/research/</loc>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2006-whitehat-security-inc-hacking-intranet-websites-outside/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/secunia-com-internet-explorer-7-mhtml-redirection-information-disclosure/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/shampoo-antville-org-somewhat-breaking-same-origin-policy-undermining-pinning/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/jeremiahgrossman-blogspot-com-i-know-where-you-ve-been/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-backdooring-quicktime-movies/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/securityfocus-com-forging-http-request-headers-flash/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-exponential-xss-attacks/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2006-ha-ckers-org-selecting-encoding-methods-xss-filter-evasion/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2006-whitehat-security-cross-site-scripting-worms-viruses-impending-defense/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/spi-dynamics-inc-feed-injection-web-2-0-hacking-rss-atom-feed-implementations/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-attack-tiny-urls/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-backdooring-mp3-files/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cgisecurity-com-web-security-news-10-04-06-more-fun-css-history/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hpe-com-stealing-search-engine-queries-javascript/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/webappsec-org-mx-injection-capturing-exploiting-hidden-mail-servers-articles/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/michaeldaw-org-csrf-ms-word/</loc>
    <lastmod>2026-08-07</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/michaeldaw-org-backdooring-pdf-files/</loc>
    <lastmod>2026-08-07</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-archive-explorer/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-php-security-org-javascript-html-portscanning-http-auth/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-php-security-org-bruteforcing-http-auth-firefox-javascript/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-jeremiahgrossman-com-bypassing-mozilla-port-blocking/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/4diggers-blogspot-com-digger-s-blog/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-archive-expect-flash/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-archive-cross-size/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-enumerating-through-user-accounts-ha-ckers-org-web-application-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sla-ckers-org-widespread-xss-google-search-appliance/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-detecting-states-authentication-protected-images-ha-ckers-org-lab/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sla-ckers-org-xss-fragmentation-attacks-myspace-0day/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2005-hardened-php-net-hardened-php-project-php-security-poking-new-holes-files/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-2/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sift-com-au-sift-information-security-services/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/imap-vulnerable-xss/</loc>
    <lastmod>2026-08-06</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-detecting-privoxy-users-circumventing-it-ha-ckers-org-web-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-using-css-de-anonymize-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-response-splitting-filter-evasion-ha-ckers-org-web-application-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-archive-css-cookie/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-detecting-firefox-extentions-ha-ckers-org-web-application-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-archive-stealing-filling/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-circumventing-dns-pinning-xss-ha-ckers-org-web-application-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/lists-webappsec-org-web-security-netflix-com-xsrf-vuln/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-jeremiahgrossman-com-browser-port-scanning-without-javascript/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sla-ckers-org-sla-ckers-org-web-application-security-forum-full-appliance/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sla-ckers-org-bypassing-filters-encoding/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-variable-width-encoding-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/iblog-ilia-alshanetsky-network-scanning-http-without-javascript/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/informationweek-com-t-hack-highlights-web-site-vulnerabilities/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-jeremiahgrossman-com-how-get-linked-slashdot/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/darkreading-com-dark-reading-desktop-security-hackers-reveal-vulnerable-websites/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blogs-securiteam-com-securiteam-blogs-exploiting-google-phishing/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/seclists-org-information-security-news-nikon-magazine-hit-security-breach/</loc>
    <lastmod>2026-08-07</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2006-infoworld-governator-hack-investigated/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2006-techcrunch-metaverse-breached-second-life-customer-database-hacked/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/news-netcraft-com-netcraft-hostgator-cpanel-security-hole-exploited-mass-hack/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-jeremiahgrossman-com-i-know-what-you-ve-got-firefox-extensions/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-jeremiahgrossman-com-my-tv-interview-abc-news-au/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/washingtonpost-com-security-fix-brian-krebs-computer-internet-security/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blogs-securiteam-com-securiteam-blogs-xanga-hit-script-worm/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-jeremiahgrossman-com-advanced-web-attack-techniques-using-gmail/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/news-netcraft-com-netcraft-paypal-security-flaw-allows-identity-theft/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/securityfocus-com-bypassing-web-filters-using-ascii/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-adultspace-xss-worm-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blogs-securiteam-com-securiteam-blogs-anonymizing-rfi-attacks-through-google/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-4/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-3/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-backdooring-flash-objects-walkthrough/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-backdooring-images/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hpe-com-hacker-protection-sql-injection-spi-dynamics/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-6/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/subverting-ajax/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cross-site-cooking/</loc>
    <lastmod>2026-08-08</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sql-injections-truncation/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ajax-security/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/breaking-ajax-web-applications-vulns-2-0-web-2-0/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-self-contained-xss-attacks/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/seclists-org-bugtraq-whitepaper-amit-klein-http-response-smuggling/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-google-search-api-worms/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/docs-google-com-xss-vulnerabilities-common-shockwave-flash-files/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/archives-neohapsis-com-full-disclosure-adobe-acrobat-reader-vulnerabilities/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2007-gnucitizen-web-mayhem-firefoxs-jar-protocol-issues/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2007-cross-site-printing/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-hiding-js-valid-images/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2007-xs-sniper-com-firefoxurl-uri-handler-flaw/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/jumperz-net-j-u-m-p-e-r-z-n-e-t-stealing-information-using-anti-demonstration/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-google-gmail-e-mail-hijack-technique/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-archive-pdf-xss-machine/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/xs-sniper-com-billy-bk-rios-stealing-pictures-picasa/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-hscan-redux/</loc>
    <lastmod>2026-08-07</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-iso-8895-1-vulnerable-firefox-null-injection-ha-ckers-org-web-lab/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/paranoia-dubfire-net-remote-vulnerability-firefox-extensions/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/procheckup-com-procheckup-security-vulnerabilities-2007/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-non-alpha-non-digit-3-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-jeremiahgrossman-com-i-still-know-where-you-ve-been-without-javascript/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hackademix-net-pure-javatm-pure-eviltm-popups/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-google-adsense-csrf-hole/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/xs-sniper-com-billy-bk-rios-theres-oak-tree-my-blog/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/xs-sniper-com-billy-bk-rios-bk-mayor-oak-tree-view/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/xs-sniper-com-billy-bk-rios-google-docs-puts-google-users-risk/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/xs-sniper-com-billy-bk-rios-all-your-google-docs-belong-us/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/xs-sniper-com-billy-bk-rios-java-applets-dns-rebinding/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/wisec-it-wisec-wise-security-2/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/xs-sniper-com-billy-bk-rios-firefox-file-handling-woes/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-bugs-browser-firefox-s-data-url-scheme-vulnerability/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/wisec-it-wisec-wise-security/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/wisec-it-wisec-wise-security-3/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/wisec-it-wisec-wise-security-5/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ibm-application-security-insider-favorites-gone-wild/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hackademix-net-hackademix-net-cross-browser-proxy-unmasking/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-spoofing-firefox-protected-objects/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-injecting-script-tag-xml/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-jeremiahgrossman-com-intranet-hacking-take-2-bh-usa-2007/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sensepost-com-extern-blog-sensepost/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-12/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-archive-flooding/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-archive-servers/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-archive-effects-zones/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-archive-paper-browsers/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/scan-flashsec-org-design-flaw-as3-socket-handling-allows-port-probing-scanner/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/wisec-it-wisec-wise-security-4/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/xs-sniper-com-billy-bk-rios-more-uri-stuff-ies-resouce-uri/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-9/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ie6-0-protocol-guessing-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/wisec-it-wisec-wise-security-6/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-archive-hacking-force/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-internet-archiver-port-scanner-ha-ckers-org-web-application-lab/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-8/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-archive-code-uploads/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-archive-cross-tactics/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-additional-image-bypass-windows-ha-ckers-org-web-application-lab/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/kuza55-blogspot-com-more-logged-user-detection-authenticated-redirects/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-passing-malicious-php-through-getimagesize-ha-ckers-org-web-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-archive-turn-any-popup/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-enumerate-windows-users-js-ha-ckers-org-web-application-lab/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/jumperz-net-j-u-m-p-e-r-z-n-e-t-anti-dns-pinning-dns-rebinding-socket-flash/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-iframe-http-ping-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-read-firefox-settings-poc-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-stealing-mouse-clicks-banner-fraud-ha-ckers-org-web-lab/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/kuza55-blogspot-com-non-persistent-untraceable-xss-attacks/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-7/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-archive-detecting-ie/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/bindshell-net-bindshell-net-manipulating-ftp-clients-using-pasv-command/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-localrodeo-detection-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-image-names-gone-bad-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-archive-ie-sends-header/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/fortra-com-securiteam-firefox-popup-blocker-allows-reading-arbitrary-local-files/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ie7-0-detector-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/bugzilla-mozilla-org-370445-cve-2007-0981-embedded-nulls-location-vulnerability/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-archive-embeding-firefox/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-firefox-header-redirection-javascript-execution-ha-ckers-org-lab/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-hacking-without-0days-drive-java/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-google-urchin-password-theft-madness/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-username-enumeration-vulnerabilities/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-client-side-sql-injection-attacks/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-content-disposition-hacking/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-flash-cookie-object-tracking/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-java-jar-attacks-features/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-severe-xss-google-others-due-jar-protocol-issues/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-0day-quicktime-pwns-firefox/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ise-io-exploiting-second-life/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/crypto-stanford-edu-boneh-publications-exposing-private-applications/</loc>
    <lastmod>2026-08-08</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/heap-feng-shui-javascript/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/nd2db-attack-database-content-extraction-using-timing-attacks-algorithms/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/seclab-stanford-edu-frame-hijacking/</loc>
    <lastmod>2026-08-08</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/seclists-org-secure-coding-javascript-hijacking/</loc>
    <lastmod>2026-08-08</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-ghost-browser-analysis-web-based-malware/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/caffeinemonkey-automated-collection-detection-analysis-malicious-javascript/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/microsoft-research-analysis-browser-domain-isolation-bugs-light-mechanism/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-transaction-generators-root-kits-web/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/seclists-org-full-disclosure-advisory-03-2007-multiple-browsers-vulnerability/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/windows-dns-server-cache-poisoning/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/black-hat-usa-taxonomy-attacks-against-xml-digital-signatures-encryption/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/black-hat-usa-little-hybrid-web-worm-that-could/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/chromewebdata-how-create-gifar/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ibm-application-security-insider-breaking-google-gears-cross-origin-model/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/dhanjani-com-safari-carpet-bomb/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-jeremiahgrossman-com-clickjacking-web-pages-can-see-hear-you/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2008-aviv-raffon-net-different-opera/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/abusing-html-5-structured-client-side-storage/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/scarybeastsecurity-blogspot-com-cross-domain-leaks-site-logins/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/tunneling-tcp-over-http-over-sql-injection/</loc>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-carnal0wnage-com-owning-client-without-exploit/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ibm-application-security-insider-flash-parameter-injection/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-jeremiahgrossman-com-fun-cups/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/r00tin-blogspot-com-farfromr00tin-utorrent-pwn3d/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/bypassing-url-authentication-authorization-http-verb-tampering/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-jeremiahgrossman-com-i-i-used-i-know-what-you-watched-youtube/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blogs-adobe-com-adobe-product-security-incident-response-team-psirt-update/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2008-guy-a-bug-internet-explorer-security-model-when-embedding-flash/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-frame-injection-fun/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/grutztopia-jingojango-net-another-free-macworld-platinum-pass-yes-2008/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-10/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/snmp-xss-attack/</loc>
    <lastmod>2026-08-15</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-archive-res-timing-0/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/schmoil-blogspot-com-stealing-basic-auth-persistent-xss/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/schmoil-blogspot-com-smuggling-smtp-through-open-http-proxies/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/wired-com-man-allegedly-bilks-e-trade-schwab-50-000-collecting-lots-deposits/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/mikeonads-com-mike-ads-blog-archive-using-your-browser-url-history-gender/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-cross-site-file-upload-attacks/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/i8jesus-com-same-origin-bypassing-using-image-dimensions/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-http-proxies-bypass-firewalls-ha-ckers-org-web-application-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-ha-ckers-org-web-application-security-lab-11/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-javascript-global-namespace-pollution/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/i8jesus-com-html-css-injections-primitive-malicious-code/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sectheory-com-hacking-intranets-through-web-interfaces/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/kuza55-blogspot-com-cookie-path-traversal/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/kuza55-blogspot-com-racing-downgrade-users-cookie-less-authentication/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/suspekt-org-mysql-sql-column-truncation-vulnerabilities/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sectheory-com-building-subversive-file-sharing-client-side-applications/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/scary-beasts-org-cesa-2008-010/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/scary-beasts-org-cesa-2008-011/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/scary-beasts-org-cesa-2008-009/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sirdarckcat-blogspot-com-browser-s-ghost-busters/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sirdarckcat-blogspot-com-exploiting-xss-vulnerabilities-cookies/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ibm-application-security-insider-cross-environment-hopping/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/kuza55-blogspot-com-exploiting-logged-out-xss-vulnerabilities/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/kuza55-blogspot-com-exploiting-csrf-protected-xss/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sensepost-com-reduh-tcp-redirection-over-http/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-pwning-ubuntu-cups/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-watchfire-com-ibm-application-security-insider-javascript-code-advisory/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/seclists-org-bugtraq-common-dns-misconfiguration-can-lead-same-site-scripting/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/pulling-system32-out-over-blind-sql-injection/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/chromewebdata-aviv-raff-net-yet-another-dialog-spoofing/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/aviv-raffon-net-aviv-raff-net-skype-cross-zone-scripting-vulnerability/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/aviv-raffon-net-aviv-raff-net-safari-pwns-internet-explorer/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/aviv-raffon-net-aviv-raff-net-internet-explorer-print-table-links-vulnerability/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usefulfor-com-usefulfor-com-security-blog-archive-ssid-script-injection/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usefulfor-com-usefulfor-com-security-blog-archive-dhcp-script-injection/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/file-download-injection/</loc>
    <lastmod>2026-08-07</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-hijacking-innocent-frames/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-hacking-interwebs/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-total-surveillance-made-easy-voip-phones/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gnucitizen-org-social-networks-evil-twin-attacks/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/websecurity-com-ua-recursive-file-include-new-face-dos-attacks-websecurity/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/websecurity-com-ua-websecurity_translate/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/websecurity-com-ua-session-extending-websecurity_translate/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/3proxy-ru-security-nnov-ru-securityvulns-ru-redirects_translate/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/websecurity-com-ua-redirectors-hell-websecurity_translate/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/3proxy-ru-security-nnov-ru-securityvulns-ru-redirects-3_translate/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/json-hijacking-utf-7_translate/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sql-smuggling/</loc>
    <lastmod>2026-08-06</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/abusing-php-sockets/</loc>
    <lastmod>2026-08-06</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/procheckup-com-csrf-novell-groupwise-webaccess-allows-email-theft-other-attacks/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/robust-defenses-cross-site-request-forgery-login-csrf-origin-header/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/phreedom-org-creating-rogue-ca-certificate/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-securing-frame-communication-browsers/</loc>
    <lastmod>2026-08-08</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/forcehttps-protecting-high-security-web-sites-network-attacks/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/black-ops-2008-it-s-end-cache-as-we-know-it/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/race-vulnerabilities-web-applications/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/astrolavos-lab-increased-dns-forgery-resistance-through-0x20-bit-encoding/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-automatic-generation-xss-sql-injection-attacks-goal-checking/</loc>
    <lastmod>2026-08-08</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/fscked-org-cookiemonster-cookie-hijacking/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/exploitable-redirects-web-identification-prevalence-defense/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/lateral-sql-injection/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/scarybeast-security-cookie-forcing/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-mindedsecurity-com-http-parameter-pollution-new-web-attack-category-not-p/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2009-netifera-flickr-s-api-signature-forgery-vulnerability/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/scarybeastsecurity-blogspot-com-cross-domain-search-timing/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-slowloris-http-dos/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2009-soroush-secproject-com-microsoft-iis-0day-vulnerability-parsing-files-bug/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/stephensclafani-com-exploiting-unexploitable-xss/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sirdarckcat-blogspot-com-our-favorite-xss-filters-how-attack-them/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sectheory-com-rfc1918-caching-security-issues/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-persistent-cookies-dns-rebinding-redux/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-iphone-ssl-warning-safari-phishing-ha-ckers-org-web-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-rfc1918-blues-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-csrf-ignoring-basic-digest-auth-ha-ckers-org-web-application-lab/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-hash-information-disclosure-collisions-hard-way-ha-ckers-org-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/networksolutions-com-security-practice-socket-capable-browser-plugins-abuse/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-xmlhttpreqest-ping-sweeping-firefox-3-5-ha-ckers-org-web-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-session-fixation-dns-rebinding/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-quicky-firefox-dos-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-dns-rebinding-credential-brute-force-ha-ckers-org-web-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-smbenum-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-dns-rebinding-scraping-spamming/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-smb-decloaking-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-de-cloaking-ie7-0-windows-variables-ha-ckers-org-web-lab/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-itms-decloaking-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/foregroundsecurity-com-flash-origin-policy-issues/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/skeptikal-org-skeptikal-org-cross-subdomain-cookie-attacks/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sirdarckcat-blogspot-com-how-use-google-analytics-dos-client-some-website/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-location-based-xss-attacks/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-phpids-bypass/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-i-know-what-your-friends-did-last-summer/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-detecting-ie-12-bytes/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-detecting-browsers-javascript-hacks/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-inline-utf-7-e4x-javascript-hijacking/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-html5-xss-spanner/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-opera-xss-vectors/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-new-phpids-vector/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-bypassing-csp-fun-no-profit/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-twitter-misidentifying-context/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-ping-pong-obfuscation/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-html5-new-xss-vectors/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sirdarckcat-blogspot-com-about-css-attacks/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-jeremiahgrossman-com-web-pages-detecting-virtualized-browsers-other-tricks/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-jeremiahgrossman-com-results-unicode-left-right-pointing-double-angel-mark/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-jeremiahgrossman-com-detecting-private-browsing-mode/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/scarybeastsecurity-blogspot-com-bonus-safari-xxe-only-affecting-safari-4-beta/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/scarybeastsecurity-blogspot-com-apple-s-safari-4-also-fixes-cross-domain-theft/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/scarybeastsecurity-blogspot-com-apple-s-safari-4-fixes-local-file-theft-attack/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/scarybeastsecurity-blogspot-com-more-plausible-e4x-attack/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/schmoil-blogspot-com-brief-description-how-become-ca/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/i8jesus-com-browser-scheme-slash-quirks/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/i8jesus-com-cross-protocol-xss-non-standard-service-ports/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/i8jesus-com-forget-sidejacking-clickjacking-carjacking-enter-formjacking/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/attack-pdf-silent-http-form-repurposing-attacks/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/xss-relocation-attacks-through-word-hyperlinking/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/securethoughts-com-hacking-csrf-tokens-using-css-history-hack/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/securethoughts-com-hijacking-operas-native-page-using-malicious-rss-payloads/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/securethoughts-com-millions-pdf-invisibly-embedded-your-internal-disk-paths/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/securethoughts-com-exploiting-ie8-utf-7-xss-vulnerability-using-redirection/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/securethoughts-com-pwning-opera-unite-infernos-eleven/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/securethoughts-com-using-blended-browser-threats-involving-chrome-computer/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/securethoughts-com-bypassing-owasp-esapi-xss-protection-inside-javascript/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/securethoughts-com-hijacking-safari-4-top-sites-phish-bombs/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/zeroknock-blogspot-com-yahoo-babelfish-possible-frame-injection-attack/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gmail-google-docs-cookie-hijacking-through-pdf-repurposing/</loc>
    <lastmod>2026-08-15</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/secniche-org-ie8-link-spoofing-broken-status-bar-integrity/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/dbellucci-blogspot-com-blind-sql-injection-inference-through-underflow-error/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/stephensclafani-com-clickjacking-oauth/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/zeroknock-blogspot-com-google-translate-google-user-content-file-stringency/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-watchfire-com-ibm-application-security-insider-active-man-middle-attacks/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-quaji-com-cross-site-identification-xsid/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/zeroknock-blogspot-com-google-chrome-webkit-msword-scripting-object-stringency/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/scarybeastsecurity-blogspot-com-generic-cross-browser-cross-domain-theft/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-popup-focus-url-hijacking-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/advanced-sql-injection-operating-system-full-control/</loc>
    <lastmod>2026-08-06</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2009-slideshare-expanding-control-over-operating-system-database/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/pastebin-mario-pastebin-com/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/websecurity-com-ua-abuse-functionality-websecurity_translate/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/websecurity-com-ua-hellfire-redirectors-websecurity_translate/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/websecurity-com-ua-dos-abuse-functionality-websecurity_translate/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/lists-webappsec-org-web-security-url-spoofing-vulnerability-bots-search-engines/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/websecurity-com-ua-url-hiding-new-method-url-spoofing-attacks-websecurity/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/theharmonyguy-com-month-facebook-bugs-report/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/securethoughts-com-unauthorized-tinyurl-url-enumeration-vulnerability/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/new-tricks-defeating-ssl-practice-sslstrip-null-prefix-certificates/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/kb-cert-org-cert-cc-vulnerability-note-vu-120541/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/microsoft-research-pretty-bad-proxy-overlooked-adversary-browsers-deployments/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-cross-origin-javascript-capability-leaks-detection-defense/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/oauth-net-oauth-security-advisory-2009-1-oauth/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/webblaze-cs-berkeley-edu-webblaze-content-sniffing-attacks-web-browsers/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cross-channel-scripting-reverse-cross-channel-scripting/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/attacks-javascript-mashup-communication/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/code-injection-attacks-browsers-supporting-policies-return-javascript/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/unraveling-unicode-bag-tricks-bug-hunting/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/wolf-sheep-s-clothing-dangers-persistent-web-browser-storage/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2009-sektioneins-gmbh-advisory-02-2009-phpids-unserialize-vulnerability/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-nerdbank-net-openid-association-poisoning/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/black-hat-usa-weaponizing-web-more-attacks-user-generated-content/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/black-hat-usa-breaking-security-myths-extended-validation-ssl-certificates/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/practical-padding-oracle-attacks/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sa-my-samy-kamkar-evercookie-virtually-irrevocable-persistent-cookies/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-jeremiahgrossman-com-breaking-browsers-hacking-auto-complete-all-available/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/bad-memories/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-andlabs-org-bypassing-csrf-protections-clickjacking-http-pollution/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/abusing-internet-explorer-8-s-xss-filters/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/dark-reading-researchers-demonstrate-new-attack-that-exploits-http/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/aspectsecurity-com-javasnoop/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2010-ha-ckers-org-css-history-hack-firefox-without-javascript-portscanning/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-mindedsecurity-com-java-dsn-rebinding-java-same-ip-policy-internet-mayhem/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-jeremiahgrossman-com-patching-auto-complete-vulnerabilities-not-rescue/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-jeremiahgrossman-com-converting-unimplementable-cookie-based-xss-attack/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sa-my-samy-kamkar-phpwn-attack-php-sessions-random-numbers/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/samy-pl-samy-kamkar-nat-pinning/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sa-my-samy-kamkar-advanced-geolocation-physical-address-router-exploitation/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-xshm-mark-2-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-mitm-dns-rebinding-ssl-tls-wildcards-xss-ha-ckers-org-web-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-using-cookies-selective-dos-state-detection-ha-ckers-org-web-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-quick-proxy-detection-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-flash-camera-mic-remember-function-xss-ha-ckers-org-web-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-improving-https-side-channel-attacks-ha-ckers-org-web-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-side-channel-attacks-ssl-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ha-ckers-org-turning-xss-clickjacking-ha-ckers-org-web-application-security-lab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/m-austin-com-hacking-facebook-html5/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-andlabs-org-stealing-entire-auto-complete-data-google-chrome/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-andlabs-org-chrome-safari-users-open-stealth-html5-appcache-attack/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-mindedsecurity-com-dns-rebinding-java-applets/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/seclists-org-full-disclosure-because-you-can-t-get-enough-clickjacking/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/lcamtuf-blogspot-com-curse-inverse-strokejacking/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-andlabs-org-re-visiting-java-de-serialization-it-can-t-get-any-this/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-mindedsecurity-com-fooling-b64-encode-payload-wafs-filters/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-mindedsecurity-com-mysql-stacked-queries-sql-injection-sort/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-mindedsecurity-com-twitter-domxss-wrong-fix-something-more/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-mindedsecurity-com-get-internal-network-information-java-applets/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-mindedsecurity-com-java-applet-same-ip-host-access/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/threatpost-threatpost-first-stop-security-news/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/scarybeastsecurity-blogspot-com-posting-raw-xml-cross-domain/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-one-vector-rule-them-all/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gdssecurity-com-penetrating-intranets-through-adobe-flex-applications/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/extraexploit-blogspot-com-dollars-javascript-code-yet-another-javascript-frauds/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-kotowicz-net-xss-track-how-quietly-track-whole-website-through-single-xss/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/next-generation-clickjacking/</loc>
    <lastmod>2026-08-07</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-andlabs-org-xssing-client-side-dynamic-html-includes-hiding-html-more/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-andlabs-org-stroke-triggered-xss-strokejacking/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2010-joshua-jabra-abraham-internal-port-scanning-crystal-reports/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hackademix-net-lost-translation-asps-homoxssuality/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/soroush-me-cross-site-url-hijacking-using-error-object-mozilla-firefox/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/soroush-me-iis5-1-directory-authentication-bypass-using-i30-index-allocation/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-48bits-com-48bits-blog-blog-archive-iis6-asp-file-upload-fun-profit_translate/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/zeroknock-blogspot-com-user-interface-security-google-chrome-http-manipulation/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/google-groups-noscript-2-0-5-1-less-bypass-reflective-xss-through-union-sqlxssi/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/secniche-blogspot-com-malware-stake-malware-paradox/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-andlabs-org-port-scanning-html5-js-recon/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-andlabs-org-performing-ddos-attacks-html5-cross-origin-requests-webworkers/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-andlabs-org-cracking-hashes-javascript-cloud-ravan/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/xs-sniper-com-billy-bk-rios-will-it-blend/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/drwetter-eu-research-remarkable-2nd-order-xss-amazon-how-hack-amazon-book/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/poisoning-proxy-caches-using-java-flash-web-sockets/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/samuli-hakoniemi-net-how-conceal-xss-injection-html5/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/xs-sniper-com-billy-bk-rios-expanding-attack-surface/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/skeletonscribe-net-chronofeit-phishing/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/non-obvious-crypto-bugs-example/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2010-reiners-weblog-sqli-filter-evasion-cheat-sheet-mysql/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-azarask-new-type-phishing-attack/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ui-redressing-attacks-countermeasures-revisited/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/how-unique-your-web-browser/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/symbolic-execution-framework-javascript/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/iseclab-org-iseclab-practical-attack-de-anonymize-social-network-users/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/flax-systematic-discovery-client-side-validation-vulnerabilities-applications/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/protecting-browsers-extension-vulnerabilities/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/regular-expressions-considered-harmful-client-side-xss-filters/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/busting-frame-busting-study-clickjacking-vulnerabilities-popular-sites/</loc>
    <lastmod>2026-08-07</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/bryceboe-com-ucsbs-international-capture-flag-competition-2010-challenge-6-ear/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/notamper-automatic-blackbox-detection-parameter-tampering-applications/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/microsoft-research-incoherencies-web-browser-access-control-policies/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/protecting-browsers-cross-origin-css-attacks/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-analysis-private-browsing-modes-modern-browsers/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/microsoft-research-residue-objects-challenge-web-browser-security/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/webblaze-cs-berkeley-edu-webblaze-preventing-capability-leaks-secure-subsets/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/empirical-study-privacy-violating-information-flows-javascript-web-applications/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/state-art-automated-black-box-web-application-vulnerability-testing/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/emperor-s-new-apis-secure-usage-new-client-side-primitives/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/microsoft-research-sidebuster-automated-detection-quantification-development/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-dns-prefetching-its-privacy-implications-when-good-things-go-bad/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/lcamtuf-blogspot-com-safari-tale-betrayal-revenge/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/how-hack-millions-routers/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/xakep-ru-0day-cms_translate/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2011-blogger-beast/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2012-reiners-weblog-multiple-vulnerabilities-apache-struts2-property-java/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2011-ibm-application-security-insider-dns-poisoning-port-exhaustion/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/code-google-com-dominator-community-version-dominator-firefox/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/biting-hand-that-serves-you-closer-look-client-side-flash-proxies-requests/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/expression-language-injection/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2011-neal-poole-java-applet-same-origin-policy-bypass-http-redirect/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gursevkalra-blogspot-com-random-security-captcha-hax-tessercap/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-securitee-org-bypassing-chrome-s-anti-xss-filter/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/lists-webappsec-org-web-security-csrf-flash-307-redirect-game-over/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/xs-sniper-com-billy-bk-rios-bypassing-flashs-local-filesystem-sandbox/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2011-grepular-com-abusing-http-status-codes-expose-private-information/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/andrewmcafee-org-spytunes/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/close-encounters-third-kind-client-side-javascript-vulnerabilities/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/elie-net-tracking-users-that-block-cookies-http-redirect/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/elie-im-failure-noise-based-non-continuous-audio-captchas/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2011-yifan-lu-kindle-touch-5-0-jailbreak-root-ssh/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-nulls-entities-firefox/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/schemehostport-com-scheme-host-port-timing-attacks-css-shaders/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/shreeraj-blogspot-com-csrf-json-leveraging-xhr-cors/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/shreeraj-blogspot-com-double-eval-dom-based-xss/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/kyleosborn-org-hidden-xss-attacking-desktop-mobile-platforms/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/rapid-history-extraction-through-non-destructive-cache-timing-v8/</loc>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/aboulton-blogspot-com-new-security-vulnerability-lotus-notes-formula-injection/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-kotowicz-net-stripping-referrer-fun-profit/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-kotowicz-net-how-upload-arbitrary-file-contents-cross-domain/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-kotowicz-net-exploiting-unexploitable-xss-clickjacking/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-kotowicz-net-how-get-sql-query-contents-sql-injection-flaw/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-kotowicz-net-xss-track-as-html5-websockets-traffic-sniffer/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-kotowicz-net-cross-domain-content-extraction-fake-captcha/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-mindedsecurity-com-autocomplete-again/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ibm-application-security-insider-json-based-xss-exploitation/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/feross-org-how-spy-webcams-your-website-visitors-feross-org/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/vttynotes-blogspot-com-cve-2011-3230-launch-any-file-path-web-page/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/naked-security-crowd-sourcing-mischief-google-maps-leads-customers-astray/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2011-superevr-xss-skype-ios-superevr/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cookiejacking/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/chromewebdata-pauldotcom-archives/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2011-c22-in-suit-chrisjohnriley-surveymonkey-ip-spoofing/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/chromium-blog-using-cross-domain-images-webgl-chrome-13/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-kotowicz-net-filejacking-how-make-file-server-your-browser-html5-course/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/amolnaik4-blogspot-com-secure-belief-exploitation-self-only-cross-site-code/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-jeremiahgrossman-com-robert-rsnake-hansen-age-34-has-passed-away-facebook/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-whitehatsec-com-how-own-every-user-social-networking-site/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/elie-im-text-based-captcha-strengths-weaknesses-computer-publication/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/code-google-com-downloads-puzzlemall-vulnerable-web-application-puzzling/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/temporal-session-race-conditions-tsrc-sept-2011-presentation/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/google-chrome-chromeos-sandbox-side-step-owning-extensions/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/dsecrg-blogspot-com-digital-security-research-group-excel-formula-docs/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/soroush-me-drag-drop-xss-firefox-html5-cross-domain-frames/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2012-fahrplan-events-ccc-de-28c3-effective-denial-service-attacks-platforms/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/how-shop-free-online-security-analysis-cashier-as-service-based-web-stores/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/server-side-javascript-injection-attacking-nosql-node-js/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/you-might-also-like-privacy-risks-collaborative-filtering/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-fast-precise-sanitizer-analysis-bek/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/all-your-clouds-belong-us-security-analysis-cloud-management-interfaces/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-static-detection-access-control-vulnerabilities-web-applications/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/bit-squatting-dns-hijacking-without-exploitation/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/how-break-xml-encryption/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-dark-clouds-horizon-using-cloud-storage-as-attack-vector-space/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/waptec-whitebox-analysis-web-applications-parameter-tampering-construction/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-automated-discovery-parameter-pollution-applications/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sour-pickles-shellcoding-python-s-serialisation-format/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ptolemy-berkeley-edu-block-black-box-approach-detection-state-applications/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/i-still-know-what-you-visited-last-summer-leaking-browsing-history-user-attacks/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/crouching-tiger-hidden-payload-security-risks-scalable-vector-graphics-image-me/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cs-virginia-edu-automated-black-box-detection-side-channel-applications/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/empirical-analysis-xss-sanitization-web-application-frameworks/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/michal-zalewski-postcards-post-xss-world/</loc>
    <lastmod>2026-09-15</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/threatpost-com-new-attack-uses-ssl-tls-information-leak-hijack-https-sessions/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/erpscan-ssrf-vs-business-critical-applications-part-1-xxe-tunneling-whitepaper/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-kotowicz-net-intro-chrome-addons-hacking-fingerprinting/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-ptsecurity-com-not-so-random-numbers-take-two/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/superevr-blended-threats-javascript/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/riyazwalikar-com-bug-hunter-s-rhapsody-cross-site-port-attacks-xspa/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2012-security-musings-how-platform-using-html5-can-affect-security-your-website/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gursevkalra-blogspot-com-random-security-captcha-re-riding-attack/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/seckb-yehg-net-xss-gaining-access-httponly-cookie-2012/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/mcafee-foundstone-professional-services-pentesters-guide-hacking-whitepaper/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/computerworld-com-https-web-archive-org-web-20170903113359-http-www-data/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/news-ncsu-edu-nc-state-news-nc-state-news-information-researchers-id-computing/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2012-neohapsis-labs-browser-event-hijacking/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-ircmaxell-com-anatomy-attack-how-i-hacked-stackoverflow/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/scatmania-org-visitor-tracking-without-cookies-how-abuse-http-301s/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/whitehat-security-introducing-i-know-series/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blogs-msdn-com-hyperlink-spoofing-modern-web/</loc>
    <lastmod>2026-08-07</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/feross-org-using-html5-fullscreen-api-phishing-attacks-feross-org/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/steam-browser-protocol-insecurity/</loc>
    <lastmod>2026-08-06</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/xs-sniper-com-billy-bk-rios-content-smuggling/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2012-softpedia-users-mobile-portals-exposed-http-header-pollution-attacks-finds/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/superevr-top-level-universal-xss/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/superevr-exploiting-xss-ajax-web-applications/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/quotium-com-net-cross-site-scripting-request-validation-bypassing/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/skullsecurity-org-skullsecurity-blog-archive-stuffing-javascript-dns-names/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2012-nc-state-news-clickjacking-rootkits-android-next-big-threat/</loc>
    <lastmod>2026-08-07</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-kotowicz-net-how-facebook-lacked-x-frame-options-what-i-did-it/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/soroush-me-ie9-self-xss-blackbox-protection-bypass/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/shreeraj-blogspot-com-file-system-api-html5/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/armoredcode-com-bypassing-http-basic-authentication-php-applications/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/jsfiddle-net-css-only-clickjacking/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/whitehat-security-x-frame-options-xfo-detection-javascript/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-kotowicz-net-fun-data-urls/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/soroush-me-browsers-anti-xss-methods-asp-classic-have-been-defeated/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/lcamtuf-blogspot-com-yes-you-can-have-fun-downloads/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/dc949-org-defcon-group-949/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/lcamtuf-blogspot-com-css-visited-may-be-bit-overrated/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/soroush-me-aspxerrorpath-url-technique-scanning-net-web-application/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-kotowicz-net-cursorjacking-again/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/seckb-yehg-net-jumping-out-touch-screen-kiosks/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/seckb-yehg-net-using-post-method-bypass-ie-browser-protected-xss/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/shreeraj-blogspot-com-shreeraj-s-security-blog-password-extraction-ajax-routine/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-ptsecurity-com-positive-research-center-random-number-security-python/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/slideshare-net-no-locked-doors-no-windows-barred-hacking-openam-infrastructure/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/github-firefart-wordpresspingbackportscanner/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-nibblesec-org-ui-redressing-mayhem-firefox-0day-leakedin-affair/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-nibblesec-org-ui-redressing-mayhem-httponly-bypass-paypwn-style/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/erpscan-com-smbrelay-bible-7-ssrf-java-windows-love/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gursevkalra-blogspot-com-random-security-bypassing-captchas-providers/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/attacking-captchas-fun-profit/</loc>
    <lastmod>2026-08-06</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/phenoelit-org-let-me-github-that-you/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2012-suriya-s-blog-me-facebook-c4utionary-tale/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-malerisch-net-maxthon-cross-context-scripting-xcs-about-history/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/isecpartners-com-attack-ssl-client-certificates/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/signing-me-onto-your-accounts-through-facebook-google/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-fuzzing-code-fragments/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hovav-net-hovav-shacham-pixel-perfect/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-breaking-saml-be-whoever-you-want-be/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-enemy-state-state-aware-black-box-web-vulnerability-scanner/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/most-dangerous-code-world/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/self-exfiltration-dangers-browser-enforced-information-flow-control/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-off-path-attacking-web/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-detecting-defending-against-third-party-tracking-web/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/you-what-you-include-large-scale-evaluation-remote-javascript-inclusions/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/scriptless-attacks-stealing-pie-without-touching-sill/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/devil-implementation-details-empirical-analysis-oauth-sso-systems/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-waffle-fingerprinting-filter-rules-web-application-firewalls/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/touching-distance-website-fingerprinting-attacks-defenses/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/flashover-automated-discovery-cross-site-scripting-vulnerabilities-applications/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/teamusec-de-why-eve-mallory-love-android-analysis-android-ssl-security/</loc>
    <lastmod>2026-08-08</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-host-fingerprinting-tracking-web-privacy-security-implications/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-org-xss-fp-browser-fingerprinting-using-html-parser-quirks/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-web-based-attacks-host-proof-encrypted-storage/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cruel-intentions-violating-browser-security-privacy-through-web-intents/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/you-my-type-breaking-net-through-serialization/</loc>
    <lastmod>2026-08-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hacktics-advanced-security-center-ernst-young-ajax-hammer-harnessing-ajax-csrf/</loc>
    <lastmod>2026-09-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hacktics-advanced-security-center-ernst-young-diviner-black-box-inference-flow/</loc>
    <lastmod>2026-09-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/skeletonscribe-net-x-frame-options-gotcha/</loc>
    <lastmod>2026-09-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/acm-mxss-attacks-attacking-well-secured-web-applications-using-innerhtml-paper/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2013-threatpost-the-first-stop-for-security-news-breach-compression-seconds/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/context-information-security-pixel-perfect-timing-attacks-html5-whitepaper/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/isg-rhul-ac-uk-lucky-thirteen-breaking-tls-dtls-record-protocols/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/isg-rhul-ac-uk-security-rc4-tls/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/xml-out-band-data-retrieval/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/million-browser-botnet/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/acm-ccs-2013-25-million-flows-later-large-scale-detection-dom-based-xss/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/whitehat-security-tor-hidden-service-passive-de-cloaking/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/feross-org-introducing-html5-hard-disk-fillertm-api-feross-org/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/whitehat-security-top-3-proxy-issues-that-no-one-ever-told-you/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-whitehatsec-com-gravatar-email-enumeration-javascript/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/slideshare-net-million-browser-botnet/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2013-yoast-why-you-should-not-use-autocomplete-yoast/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ars-technica-site-plagiarizes-blog-posts-then-files-dmca-takedown-originals/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/whitehat-security-case-unconventional-csrf-attack-firefox/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/maverickblogging-com-maverickblogging-technology-art-g-s-mcnamara/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/google-groups-serialized-attributes-yaml-vulnerability-rails-2-3-3-0-cve-0277/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2013-threatpost-the-first-stop-for-security-news-java-zero-day-continues/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/what-you-didn-t-know-about-xml-external-entity-attacks/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2013-threatpost-the-first-stop-for-security-news-patches-django-vulnerability/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/superevr-don-t-use-linksys-routers/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/whitehat-security-bypassing-internet-explorer-s-anti-cross-site-scripting-filter/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2013-threatpost-the-first-stop-for-security-news-some-netgear-routers-injection/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2013-the-state-of-security-verizon-wireless-customer-portal-exposed-history/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/agarri-fr-agarri-securite-informatique-offensive/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/averagesecurityguy-finding-weak-rails-security-tokens/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/slides-trusted-friend-attack-ashar-javed/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2013-threatpost-the-first-stop-for-security-news-father-daughter-hacking-bug/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ars-technica-guerilla-researcher-created-epic-botnet-scan-billions-ip-addresses/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/eradicating-dns-rebinding-extended-same-origin-policy/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/communities-coverity-com-security-research-laboratory-struts-2-remote/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/skeletonscribe-net-practical-http-host-header-attacks/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-one-bad-apple-backwards-compatibility-attacks-state-cryptography/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-postman-always-rings-twice-attacking-defending-websites/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/microsoft-research-unauthorized-origin-crossing-mobile-platforms-mitigation/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cs-virginia-edu-explicating-sdks-uncovering-assumptions-authorization/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-authscan-automatic-extraction-web-authentication-implementations/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-org-automated-password-extraction-attack-modern-password-managers/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-truncating-tls-connections-violate-beliefs-web-applications/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-dom-clobbering/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/when-tolerance-causes-weakness-case-injection-friendly-browsers/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/seclab-cs-ucsb-edu-seclab-cookieless-monster-exploring-ecosystem-fingerprinting/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-language-based-defenses-against-untrusted-browser-origins/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-take-this-personally-pollution-attacks-personalized-services/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/exploiting-innocuous-activity-correlating-users-across-sites/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/i-know-shortened-urls-you-clicked-twitter/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-view-kill-webview-exploitation/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cross-site-scripting-attacks-social-network-apis/</loc>
    <lastmod>2026-08-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-firedrill-interactive-dns-rebinding/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-analyzing-unique-bid-auction-sites-fun-profit/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/perfect-crime-only-time-will-tell/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hacktics-advanced-security-center-ernst-young-invisibility-purge-slides/</loc>
    <lastmod>2026-09-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/heartbleed-com-heartbleed-bug/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cve-mitre-org-cve-cve-2014-6271/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/google-this-poodle-bites-exploiting-ssl-3-0-fallback/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/miki-it-abusing-jsonp-rosetta-flash/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2014-threatpost-the-first-stop-for-security-news-12-million-home-takeover/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/yasserali-com-yasser-ali-s-blog-hacking-paypal-accounts-one-click-patched/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2014-gizmodo-how-hackers-reportedly-side-stepped-google-s-two-authentication/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cwiki-apache-org-s2-020-apache-struts-2-documentation/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/chr13-com-using-facebook-notes-ddos-any-website/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/slideshare-covert-timing-channels-based-http-cache-headers-special-edition-2014/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/threatpost-com-tweetdeck-taken-down-wake-xss-attacks-threatpost/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cve-mitre-org-cve-cve-2014-0224/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/portcullis-cve-2014-3445/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blackhat-com-black-hat-usa-2014/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/vupen-com-vupen-vulnerability-research-blog-advanced-exploitation-mozilla-1512/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/web-never-forgets-persistent-tracking-mechanisms-wild/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2014-sucuri-blog-remote-file-upload-vulnerability-wordpress-newsletters/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/the-duo-security-bulletin-paypal-2fa-bypass-how-legacy-infrastructure-security/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2014-threatpost-the-first-stop-for-security-news-adobe-patches-air-flash/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2014-threatpost-the-first-stop-for-security-news-researchers-uncover-botnet/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/community-websense-com-msie-0-day-exploit-cve-2014-0322-possibly-association/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/phra-gs-wtf-ninja/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/paypal-manager-account-hijack/</loc>
    <lastmod>2026-08-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/tetraph-com-oauth-2-0-openid-covert-redirect-vulnerability/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/insertco-in-how-i-hacked-instagram-see-your-private-photos/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/homakov-blogspot-com-egor-homakov-how-i-hacked-github-again/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/kb-cert-org-vulnerability-note-vu-264212-recursive-dns-resolver-infinitely/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/labs-integrity-pt-0-day-exploit-buffer-overflow-belkin-n750-cve-2014-1635/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2014-threatpost-the-first-stop-for-security-news-new-timing-attack-could-users/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2014-sucuri-blog-soaksoak-malware-compromises-100-000-wordpress-websites/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/insert-script-blogspot-com-insertscript-multiple-pdf-vulnerabilities/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2014-sucuri-blog-slider-revolution-plugin-critical-vulnerability-being-exploited/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2014-sucuri-blog-deep-dive-hikashop-vulnerability/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-nibblesec-org-nibble-security-node-js-connect-csrf-bypass-middleware/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/homakov-blogspot-com-egor-homakov-no-captcha-problem/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2014-medium-need-last-minute-flight/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/the-hacker-news-cryptophp-backdoor-hijacks-servers-malicious-plugins-themes/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/us-cert-gov-microsoft-secure-channel-schannel-vulnerability-cve-2014-6321/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/drupal-org-sa-core-2014-005-drupal-core/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2014-trustwave-holdings-inc-reflected-file-download-new-web-attack-vector/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/misfortune-cookie-vulnerability-by-check-point-misfortune-cookie-vulnerability/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2014-labs-detectify-hostile-subdomain-takeover-using-heroku-github-desk-more/</loc>
    <lastmod>2026-08-07</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hackerone-hackerone-disclosed-hackerone-file-name-enumeration/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/whitehat-security-hackerkast-13-bonus-round-flashflood-javascript-dos/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/whitehat-security-hackerkast-14-bonus-round-canadian-beacon-javascript-apis/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-whitehatsec-com-hackerkast-11-bonus-round-latest-clickjacking/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/virtual-host-confusion-weaknesses-exploits/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/triple-handshakes-cookie-cutters-breaking-fixing-authentication-over-tls/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/using-frankencerts-automated-adversarial-testing-certificate-implementations/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/thespanner-co-uk-rpo-spanner/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-breaking-fixing-origin-based-access-control-hybrid-frameworks/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-static-detection-second-order-vulnerabilities-web-applications/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/all-your-screens-belong-us-attacks-exploiting-html5-screen-sharing-api/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-password-managers-attacks-defenses/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/expressive-model-web-infrastructure-definition-application-browserid-sso-system/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/s3-symbolic-string-solver-vulnerability-detection-web-applications/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ibm-research-mace-detecting-privilege-escalation-vulnerabilities-web-2014/</loc>
    <lastmod>2026-08-08</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-revisiting-ssl-tls-implementations-new-bleichenbacher-side-attacks/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-org-web-traffic-analysis-attack-using-only-timing-information/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-toward-black-box-detection-logic-flaws-web-applications/</loc>
    <lastmod>2026-08-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-ssoscan-automated-testing-web-applications-single-vulnerabilities/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-detecting-logic-vulnerabilities-e-commerce-applications/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/benhayak-com-same-origin-method-execution-some/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-effective-attacks-provable-defenses-website-fingerprinting/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-emperors-new-password-manager-security-analysis-web-based-managers/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/bypassing-http-strict-transport-security/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/do-not-trust-me-using-malicious-idps-analyzing-attacking-single-sign/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hacktics-advanced-security-center-ernst-young-el-3-0-lambda-injection-java/</loc>
    <lastmod>2026-09-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2014-ibm-security-systems-spoofedme-intruding-accounts-using-social-providers/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/michal-zalewski-history-theft-css-boolean-algebra/</loc>
    <lastmod>2026-09-15</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/context-information-security-comma-separated-vulnerabilities/</loc>
    <lastmod>2026-09-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/freakattack-com-tracking-freak-attack/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/schneier-com-logjam-another-vulnerability-against-diffie-hellman-key-exchange/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/publisher-not-separately-stated-manuscript-prepared-for-blackhat-usa-whitepaper/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/evading-all-web-application-filters/</loc>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2015-bishop-fox-bypass-surgery-abusing-content-delivery-networks-server-dns/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/illusorytls-com-illusorytls/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/exploiting-xxe-file-upload-functionality/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2015-ioactive-abusing-xslt-practical-attacks-white-paper/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/whitehat-security-magic-hashes/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2015-portswigger-research-hunting-asynchronous-vulnerabilities-2/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2015-foxglovesecurity-com-what-do-weblogic-websphere-jboss-vulnerability/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/us-15-gavrichenkov-breaking-https-bgp-hijacking-wp/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-trendmicro-com-new-adobe-flash-zero-day-used-pawn-storm-ministries/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2015-ars-technica-lenovo-pcs-ship-man-middle-adware-that-breaks-https-updated/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/dark-reading-new-phishing-campaign-leverages-google-drive/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/us-15-nafeez-dom-flow-untangling-dom-more-easy-juicy-bugs/</loc>
    <lastmod>2026-08-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2015-dark-reading-web-app-developers-putting-millions-risk/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/krebsonsecurity-com-st-louis-federal-reserve-suffers-dns-breach-krebs-security/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/dark-reading-scope-freak-flaw-widens-as-microsoft-says-windows-affected-too/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/krebsonsecurity-com-security-bug-dell-pcs-shipped-since-8-15/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2015-check-point-blog-finding-vulnerabilities-core-wordpress-bug-hunter-s-i/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/us-15-wang-filecry-new-age-xxe-ie-wp/</loc>
    <lastmod>2026-08-07</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/portswigger-server-side-template-injection-rce-modern-web-app/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2015-securityweek-microsoft-issues-emergency-patch-critical-ie-flaw-wild/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/us-15-potter-understanding-managing-entropy-usage-wp/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/attack-surface-project-spartan-s-edgehtml-rendering-engine/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/us-15-park-winning-online-banking-war-wp/</loc>
    <lastmod>2026-08-07</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/mozilla-security-blog-revoking-trust-one-cnnic-intermediate-certificate/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/38468-new-methods-automated-xss-detection/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/troopers-2015-old-new-again-cve-2011-2461-back/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/new-evasions-web-application-firewalls/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/whitehat-security-hackerkast-29-bonus-round-formaction-scriptless-attack/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/unexpected-dangers-dynamic-javascript/</loc>
    <lastmod>2026-08-06</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/linkedin-linkedin-security-practices-find-out-how-we-protect-you/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/mazin-ahmed-facebook-messenger-multiple-csrf-vulnerabilities/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/smtp-injection-recipient-email-address/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2015-portswigger-research-server-side-template-injection/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2015-portswigger-research-hunting-asynchronous-vulnerabilities/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/chosenplaintext-ca-critical-vulnerabilities-json-web-token-libraries/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/messy-state-union-taming-composite-state-machines-tls/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-org-spy-sandbox-practical-cache-attacks-javascript/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-org-rowhammer-js-remote-software-induced-fault-attack-javascript/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-protocol-state-fuzzing-tls-implementations/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-identifying-cross-origin-resource-status-using-application-cache/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-cookies-lack-integrity-real-world-implications/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/detecting-exploiting-second-order-denial-service-vulnerabilities-applications/</loc>
    <lastmod>2026-08-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/maneuvering-around-clouds-bypassing-cloud-based-security-providers/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/subnormal-floating-point-abnormal-timing/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-all-your-biases-belong-us-breaking-rc4-wpa-tkip-tls/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/counterfeit-object-oriented-programming-difficulty-preventing-code-applications/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/acm-conferences-perplexed-messengers-cloud-proceedings-22nd-acm-sigsac-security/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2015-publications-cispa-saarland-jak-using-dynamic-analysis-crawl-applications/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cross-site-search-attacks/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/practical-memory-deduplication-attacks-sandboxed-javascript/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/devil-constants-bypassing-defenses-browser-jit-engines/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/clock-still-ticking-timing-attacks-modern-web/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/vetting-ssl-usage-applications-sslint/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-exploiting-protecting-dynamic-code-generation/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-how-break-xml-encryption/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cross-site-framing-attacks/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/diafygi-github-io-webrtc-ip-address-leaks/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/doi-org-man-browser-cache-persisting-https-attacks-browser-cache-poisoning/</loc>
    <lastmod>2026-08-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/too-lejit-quit-extending-jit-spraying-arm/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/springerlink-cache-timing-attacks-revisited-efficient-repeatable-sniffing/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/automatically-detecting-ssl-error-handling-vulnerabilities-hybrid-mobile-apps/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-cashing-out-great-cannon-browser-based-ddos-attacks-economics/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/https-bicycle-attack/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/security-modern-single-sign-protocols-openid-connect-1-0/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sirdarckcat-blogspot-com-service-workers-new-apis-new-vulns-fun/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/new-era-ssrf-exploiting-url-parser-trending-programming-languages/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/omergil-blogspot-com-web-cache-deception-attack/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2017-medium-how-i-hacked-hundreds-companies-through-their-helpdesk/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2017-hpe-software-security-research-friday-13th-json-attacks/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/project-zero-issues-chromium-org-cloudflare-cloudflare-reverse-proxies-42450151/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2017-opnsec-advanced-flash-vulnerabilities-youtube-parts-14/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2017-labs-detectify-deep-dive-aws-s3-access-controls/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ncc-group-request-encoding-bypass-web-application-firewalls/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2017-cure53-cure53-browser-security-white-paper/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2016-gosecure-binary-webshell-through-opcache-php-7/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2017-portswigger-research-cracking-lens-targeting-http-s-hidden-attack-surface/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2016-portswigger-research-xss-without-html-client-side-template-angularjs/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2017-the-github-blog-github-s-post-csp-journey/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/mksben-l0-cm-cve-2018-5175-universal-csp-strict-dynamic-bypass-firefox/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2017-rapid7-blog-haxmas-true-meaning-s-metasploit/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2017-wallarm-good-bad-ugly-safari-client-side-attacks/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-doyensec-com-modern-alchemy-turning-xss-rce/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/my-sweet-innocence-exposed-eleven-reasons-why-we-will-all-miss-you-e/</loc>
    <lastmod>2017-07-21</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ccs-gadgets/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/statuscode-ch-markdown-rce-atom/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/georgemauer-net-absurdly-underestimated-dangers-csv-injection/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ncc-group-rare-asp-net-request-validation-bypass-using-request-encoding/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/lightningsecurity-io-password-not-provided-compromising-any-flurry-user-bounty/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-blogger-10k-host-header/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/the-hacker-blog-io-error-taking-control-all-io-domains-targeted-registration/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/kernelpicnic-net-pivoting-blind-ssrf-rce-hashicorp-consul/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2017-speaker-deck-exploiting-unexploitable-lesser-known-browser-tricks/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/paulos-yibelo-hacking-research-paulos-yibelo-hacking-research-why-csp-bypass/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/jankopecky-net-0day-text-plain-considered-harmful/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/agrrrdog-blogspot-com-autobinding-vulns-spring-mvc_translate/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/stephensclafani-com-stealing-messenger-com-login-nonces/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/labs-detectify-com-hacking-slack-using-postmessage-websocket-reconnect-token/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2017-broken-browser-attack-alerts-zombie-script-ie/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sonarsource-com-shopware-5-3-3-php-object-instantiation-blind-xxe/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2017-making-wordpress-secure-war-sqli-what-happened-4-8-2-4-8-3/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/x41-browser-security-whitepaper/</loc>
    <lastmod>2026-08-06</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/linkedin-com-top-content-linkedin/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2017-slideshare-mitm-attacks-https-another-perspective/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2017-medium-how-i-found-5-000-google-maps-xss-fiddling-protobuf/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/journey-jndi-ldap-manipulation-remote-code-execution-dream-land/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-drown-breaking-tls-using-sslv2/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/scholarworks-wm-edu-all-your-dns-records-point-us-understanding-records/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/forwarding-loop-attacks-content-delivery-networks/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/transcript-collision-attacks-breaking-authentication-tls-ike-ssh/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2016-portswigger-research-exploiting-cors-misconfigurations-bitcoins-bounties/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/back-black-towards-formal-black-box-analysis-sanitizers-filters/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-trusted-browsers-uncertain-times/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-org-comprehensive-formal-security-analysis-oauth-2-0/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/attack-patterns-black-box-security-testing-multi-party-web-applications/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/towards-automated-dynamic-analysis-linux-based-embedded-firmware/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/automatic-forgery-cryptographically-consistent-messages-identify-services/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sweet32-info-sweet32-birthday-attacks-64-bit-block-ciphers-tls-openvpn/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-request-conquer-exposing-cross-origin-resource-size/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/timing-attacks-have-never-been-so-practical-advanced-cross-site-search-attacks/</loc>
    <lastmod>2026-08-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/research-google-csp-dead-long-live-csp-insecurity-whitelists-future-policy/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/mitm-attack-name-collision-cause-analysis-vulnerability-assessment-new-gtld-era/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/crossfire-analysis-firefox-extension-reuse-vulnerabilities/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/tracking-mobile-web-users-through-motion-sensors-attacks-defenses/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blackhat-com-black-hat-usa-2016/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/heist-http-encrypted-information-can-be-stolen-through-tcp-windows/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/practical-new-developments-breach-attack/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/simple-generic-attack-text-captchas/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/killed-proxy-analyzing-client-end-tls-interception-software/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cracked-cookie-jar-http-cookie-hijacking-exposure-private-information/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/domain-z-28-registrations-later/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/website-fingerprinting-internet-scale/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/beauty-beast-diverting-modern-web-browsers-build-unique-browser-fingerprints/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-org-i-know-what-you-saw-last-minute-encrypted-http-classification/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/wolf-name-street-hijacking-domains-through-their-nameservers/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-aslr-line-practical-cache-attacks-mmu/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-loophole-timing-attacks-shared-event-loops-chrome/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/finding-preventing-bugs-javascript-bindings/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/rewriting-history-changing-archived-web-present/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/fantastic-timers-where-find-them-high-resolution-microarchitectural-javascript/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/nezha-efficient-domain-independent-differential-testing/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/authscope-towards-automatic-discovery-vulnerable-access-control-online-services/</loc>
    <lastmod>2026-08-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/side-channel-attacks-shared-search-indexes/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hvlearn-automated-black-box-analysis-hostname-verification-ssl-implementations/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-cross-browser-fingerprinting-os-hardware-level-features/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/unleashing-walking-dead-understanding-cross-app-remote-infections-webviews/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/deemon-detecting-csrf-dynamic-analysis-property-graphs/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/tail-attacks-web-applications/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-extension-breakdown-security-analysis-browsers-extension-policies/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-org-automated-website-fingerprinting-through-deep-learning/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-same-origin-policy-evaluation-modern-browsers/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-pdf-mirage-content-masking-attack-against-information-based-services/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hal-inria-fr-fp-stalker-tracking-browser-fingerprint-evolutions/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-fake-co-visitation-injection-attacks-recommender-systems/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/beautyburst-github-io-beauty-burst-remote-identification-encrypted-video-streams/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ieee-security-org-ieee-symposium-security-privacy-2017/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/robotattack-org-robot-attack/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blackhat-com-black-hat-usa-2017/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/york-research-database-stealing-pins-mobile-sensors-actual-risk-perception/</loc>
    <lastmod>2026-08-08</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blackhat-com-black-hat-europe-2017/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-game-registrars-empirical-analysis-post-expiration-domain-takeovers/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/elttam-com-remote-ld-preload-exploitation/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/bugs-php-net-php-sec-bug-72663-create-unexpected-object-don-t-deserialization/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2016-portswigger-research-json-hijacking-modern-web/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-scrt-ch-net-serialiception/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/comparisons-attacks-http2-comparaisons-et-attaques-sur-http2_translate/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/http-2-depth-analysis-top-four-flaws/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/content-security-policy-violations-due-same-origin-policy/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/well-that-escalated-quickly/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/shiftordie-de-fingerprinting-firefox-users-cached-intermediate-ca-fiprinca/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/microsoft-dangerous-contents-securing-net-deserialization/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2016-portswigger-research-backslash-powered-scanning-hunting-unknown-classes/</loc>
    <lastmod>2026-09-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2017-portswigger-research-when-security-features-collide/</loc>
    <lastmod>2026-09-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-black-hat-breaking-parser-logic-take-your-path-normalization-off-pop-out/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-portswigger-research-practical-web-cache-poisoning/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-gosecure-beyond-xss-edge-side-include-injection/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/github-holyvier-prototype-pollution-nsec18/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-owasp-appsec-europe-attacking-modern-web-technologies-slides/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-secarma-labs-file-operation-induced-unserialization-phar-stream-wrapper/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/mohemiv-com-exploiting-xxe-local-dtd-files/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-owasp-appsec-europe-prepare-introducing-novel-exploitation-wordpress/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-notsosecure-data-exfiltration-formula-injection-part1/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-medium-xs-searching-googles-bug-tracker-find-out-vulnerable-source-code/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-labs-detectify-how-i-exploited-acme-tls-sni-01-issuing-let-s-hosting/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/the-hacker-blog-kicking-rims-guide-securely-writing-auditing-chrome-extensions/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-edoverflow-analysis-logic-flaws-web-trust-services/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-labs-detectify-scratching-surface-host-headers-safari/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-003random-s-blog-rce-uploading-web-config/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/regilero-github-io-security-http-smuggling-apsis-pound-load-balancer/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-medium-piercing-veil-server-side-request-forgery-niprnet-access/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/inputzero-io-bug-that-affects-million-users/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/inputzero-io-telegram-anonymity-fails-desktop/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/inputzero-io-untold-story-skype-microsoft/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-wallarm-neatly-bypassing-csp/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/large-scale-analysis-style-injection-relative-path-overwrite-www2018rpo-pdf/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-speaker-deck-logically-bypassing-browser-security-boundaries/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/us-17-gil-web-cache-deception-attack-wp/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/duo-security-duo-finds-saml-vulnerabilities-affecting-multiple-implementations/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/github-browser-v1-10-8-fixes-url-matchers-dep-upgrade-10277/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/lanmaster53-com-lanmaster53-com/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hackerone-rockstar-games-disclosed-hackerone-stored-xss-snapmatic/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/insert-script-blogspot-com-adobe-reader-pdf-client-side-request-injection/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-blogger-36k-google-app-engine-rce/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hackerone-shopify-disclosed-hackerone-ssrf-exchange-leads-root/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/andres-riancho-recaptcha-bypass-http-parameter-pollution/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/the-hacker-blog-reading-your-emails-read-write-chrome-extension-same-affected/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/leucosite-com-firefox-uxss-css-xss/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/bishop-fox-server-side-spreadsheet-injection-formula-injection-remote-code/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-0x09al-security-blog-bypassing-web-application-firewalls-abusing-ssl-tls/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-portswigger-research-evading-csp-dom-based-dangling-markup/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/web-in-security-blogspot-com-save-your-cloud-dos-vms-opennebula-4-6-1/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-medium-crlf-injection-phps-curl-options/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hackerone-x-xai-disclosed-hackerone-account-takeover-periscope-tv/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-sheddow-s-blog-timing-attack-css-selectors-javascript/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-xss-jigsaw-vpn-extensions-not-privacy/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-portswigger-research-exposing-intranets-reliable-browser-based-scanning/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-speaker-deck-story-passive-aggressive-sysadmin-aem/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-speaker-deck-hunting-security-bugs-aem-webapps/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ncc-group-asp-net-resource-files-resx-deserialisation-issues/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/soroush-me-story-my-two-but-actually-three-rces-sharepoint-2018/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ncc-group-beware-deserialisation-net-methods-classes-code-execution-paste/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/footstep-ninja-cat-footstep-ninja-blog-txt/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-harsh-jaiswal-rce-due-showexceptions/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-bentkowski-info-vulnerability-hangouts-chat-open-redirect-code-execution/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-spyclub-blog-gopherus-tool/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/mwr-labs-dns-rebinding-headless-browsers/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/spectre-attacks-exploiting-speculative-execution/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-browser-history-re-visited/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-bamboozling-certificate-authorities-bgp/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/study-mitigation-origin-stripping-vulnerabilities-hybrid-applications/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/grand-pwning-unit-accelerating-microarchitectural-attacks-gpu/</loc>
    <lastmod>2026-08-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cloud-strife-mitigating-security-risks-domain-validated-certificates/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/mobile-application-web-api-reconnaissance-web-mobile-vulnerabilities/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/synode-understanding-automatically-preventing-injection-attacks-node-js/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/navex-precise-scalable-exploit-generation-dynamic-web-applications/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-wpse-fortifying-web-protocols-browser-side-security-monitoring/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/clock-around-clock-time-based-device-fingerprinting/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-vetting-single-sign-sdk-implementations-symbolic-reasoning/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-org-deep-fingerprinting-undermining-website-fingerprinting-learning/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-o-single-sign-off-where-art-thou-empirical-analysis-single-sign-web/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/projectzero-google-adventures-video-conferencing-part-1-wild-world-webrtc/</loc>
    <lastmod>2026-08-08</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-sense-time-javascript-node-js-first-class-timeouts-as-cure-poisoning/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/mystique-uncovering-information-leakage-browser-extensions/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/automated-generation-event-oriented-exploits-android-hybrid-apps/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/riding-out-domsday-towards-detecting-preventing-dom-cross-site-scripting/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-freezing-web-study-redos-vulnerabilities-javascript-based-web-servers/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/security-risks-asynchronous-web-servers-when-performance-optimizations-attacks/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-usenix-woot-18-workshop-program/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/elttam-com-ruby-2-x-universal-rce-deserialization-gadget-chain/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ncc-group-smb-hash-hijacking-user-tracking-ms-outlook/</loc>
    <lastmod>2026-08-18</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/pride-prejudice-progressive-web-apps-abusing-native-app-like-applications/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-portswigger-research-bypassing-web-cache-poisoning-countermeasures/</loc>
    <lastmod>2026-09-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cached-confused-web-cache-deception-wild/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sirdarckcat-blogspot-com-http-cache-cross-site-leaks/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-def-con-owning-clout-through-ssrf-pdf-generators-slides/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-orange-tsai-hacking-jenkins-part-2-abusing-meta-programming-rce/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/google-search-xss/</loc>
    <lastmod>2019-04-07</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-blog-isec-pl-all-xss-that-comes-net/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-edoverflow-ci-knew-there-would-be-bugs-here-exploring-continuous-hunter/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/infiltrating-corporate-intranet-like-nsa-pre-auth-rce-leading-ssl-vpns/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/leucosite-com-microsoft-edge-chromium-elevation-privilege-potential-execution/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-samcurry-net-filling-blanks-exploiting-null-byte-buffer-overflow-40-bounty/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-portswigger-research-http-desync-attacks-request-smuggling-reborn/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-blogger-facebook-messenger-server-random-memory-exposure-through-image/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-speaker-deck-let-s-make-windows-defender-angry-antivirus-can-be-oracle/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-speaker-deck-home-among-strangers/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-teddy-katzs-blog-exploiting-padding-oracles-fixed-ivs/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-research-securitum-com-xss-gmail-s-amp4email-dom-clobbering/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/nathandavison-com-abusing-http-hop-hop-request-headers/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-speaker-deck-whats-wrong-websocket-apis-unveiling-vulnerabilities-apis/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cpdos-org-cache-poisoned-denial-service_translate/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-research-securitum-com-security-analysis-portal-element/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-medium-abusing-autoresponders-email-bounces/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-gosecure-esi-injection-part-2-abusing-specific-implementations/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/buer-haus-tale-exploitation-spreadsheet-file-conversions/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-medium-reusing-cookies/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/silentrobots-com-ssrf-protocol-smuggling-plaintext-credential-handlers-ldap/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-research-securitum-com-exploiting-prototype-pollution-rce-kibana-cve-7609/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-notsosecure-exploiting-ssrf-aws-elastic-beanstalk/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/shielder-shielder-dont-open-that-xml-xxe-rce-xml-plugins-vs-code-eclipse-theia/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ncc-group-finding-exploiting-net-remoting-over-http-using-deserialisation/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/getting-shell-xamlx-files/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/common-security-issues-financially-oriented-web-applications/</loc>
    <lastmod>2026-08-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/soroush-me-iis-application-vs-folder-detection-during-blackbox-testing/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/soroush-me-exploiting-deserialisation-asp-net-viewstate/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-speaker-deck-cookie-monster-your-browsers/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-research-securitum-com-write-up-dompurify-2-0-0-bypass-using-mutation-xss/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-medium-xss-auditor-protector-unprotected/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-payatu-get-pwned-scanning-firefox-qr-code-reader/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/know-bishopfox-com-cve-2019-18935-remote-code-execution-insecure-ui/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-speaker-deck-world-site-isolation-compromised-renderer/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sso-wars-token-menace/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hostsplit-exploitable-antipatterns-unicode-normalization/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/mazin-ahmed-backchannel-leaks-strict-content-security-policy/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/soroush-me-uploading-web-config-fun-profit-2/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-veracode-exploiting-spring-boot-actuators/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/veracode-exploiting-jndi-injections-java/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/github-veracode-research-solr-injection/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-orange-tsai-analysis-thought-about-recently-php-fpm-rce-cve-2019-11043/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-acunetix-bypassing-sop-using-browser-cache/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2018-speaker-deck-reverse-proxies-inconsistency/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/soroush-me-x-up-devcap-post-charset-header-asp-net-bypass-wafs-again/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-portswigger-research-turbo-intruder-embracing-billion-request-attack/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-org-cross-origin-state-inference-cosi-attacks-leaking-web-site-leaks/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-iframes-popups-dangerous-mobile-webview-studying-vulnerabilities/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-leaky-images-targeted-privacy-attacks-web/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-portswigger-research-bypassing-csp-policy-injection/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/javascript-template-attacks-automatically-inferring-host-information-exploits/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-what-you-searching-remote-keylogging-attack-search-autocomplete/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cross-site-challenge-response-attacks/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/phishfarm-scalable-framework-measuring-effectiveness-evasion-blacklists/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-all-your-clicks-belong-me-investigating-click-interception-web/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/latex-gloves-protecting-browser-extensions-probing-revelation-attacks/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-scalable-scanning-automatic-classification-tls-vulnerabilities/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/postcards-post-http-world-amplification-https-vulnerabilities-web-ecosystem/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-betrayal-cloud-city-empirical-analysis-cloud-based-mobile-backends/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-portswigger-research-provoking-browser-quirks-behavioural-fuzzing/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/doi-org-measuring-analyzing-search-engine-poisoning-linguistic-collisions/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/telerik-revisited/</loc>
    <lastmod>2026-08-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/re-animating-activitysurrogateselector/</loc>
    <lastmod>2026-08-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/practical-decryption-exfiltration-breaking-pdf-encryption/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/labs-bishopfox-com-h2c-smuggling-request-smuggling-http-2-cleartext-h2c/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-portswigger-research-portable-data-exfiltration-xss-pdfs/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/attacking-secondary-contexts-web-applications/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/github-jmdx-tls-poison/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/samy-pl-samy-kamkar-nat-slipstreaming-v2-0/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-telekom-security-smuggling-http-headers-through-reverse-proxies/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-orange-tsai-how-i-hacked-facebook-again-unauthenticated-rce-mobileiron-mdm/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/insert-script-blogspot-com-imagemagick-shell-injection-pdf-password/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/pt-swarm-attacking-ms-exchange-web-interfaces/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-blog-isec-pl-waf-evasion-techniques/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2019-medium-write-up-path-traversal-gravitee-io/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/alphabot-com-fastjson-exceptional-deserialization-vulnerabilities/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/room-escape-scribbling-outside-lines-template-security/</loc>
    <lastmod>2026-08-07</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-portswigger-research-web-cache-entanglement-novel-pathways-poisoning/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/http-request-smuggling-2020/</loc>
    <lastmod>2026-08-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-portswigger-research-redefining-impossible-xss-without-arbitrary-javascript/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-research-securitum-com-curious-case-copy-paste-risks-pasting-browsers/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-research-securitum-com-mutation-xss-namespace-confusion-dompurify-2-bypass/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-enumerated-salesforce-lightning-depth-look-exploitation-vectors-enumerated/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/pt-swarm-advanced-mssql-injection-tricks/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-medium-sd-pwn-part-2-citrix-sd-wan-center-another-network-takeover/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-medium-blind-sql-injection-without/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-spaceraccoon-dev-remote-code-execution-three-acts-chaining-exposed-2/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/nathandavison-com-exploiting-email-address-parsing-aws-ses/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-speaker-deck-revisiting-redos-rough-idea-data-exfiltration-techniques/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-don-t-be-a-5kiddo-be-a-hacker-exploiting-post-based-xssi/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-silent-signal-techblog-uninitialized-memory-disclosures-web-applications/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-doyensec-com-researching-polymorphic-images-xss-google-scholar/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-lexfo-fr-secret-fragments-remote-code-execution-symfony-based-websites/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/bugs-xdavidhu-me-unexpected-google-wide-domain-check-bypass/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-research-securitum-com-marginwidth-marginheight-unexpected-cross-channel/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-research-securitum-com-css-data-exfiltration-firefox-single-injection-point/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gremwell-com-forcing-firefox-execute-xss-payloads-during-302-redirects/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hackerone-slack-disclosed-hackerone-turn-server-allows-tcp-udp/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-posix-ast-injection-prototype-pollution-rce/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-medium-bypass-samesite-cookies-default-lax-get-csrf/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-mdsec-covert-web-shells-net-read-only-web-paths/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-mdsec-security-review-sharepoint-site-pages/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-payatu-my-hacking-adventures-safari-reader-mode/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/chromewebdata-code-injection-workflows-leading-sharepoint-rce-cve-2020-0646/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-medium-powerful-http-request-smuggling/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/honoki-net-xxe-scape-through-front-door-circumventing-firewall-http-smuggling/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hackemall-live-akamai-web-application-firewall-bypass-journey-vulnerability/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/r2c-r2c-blog-exploiting-dynamic-rendering-engines-take-control-web-apps/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-wallarm-blind-ssrf-exploitation/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-medium-story-weird-vulnerability-i-found-facebook/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-medium-weird-vulnerabilities-happening-load-balancers-shallow-copies-caches/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-medium-unauthorized-google-maps-api-key-usage-cases-why-you-need-care/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-blog-isec-pl-xss-fun-animated-svg/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/pt-swarm-remote-code-execution-f5-bigip/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-web-insecurity-blog-real-life-oidc-security-ii-login-confusion/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/security-privacy-social-logins/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/youst-in-cache-key-normalization-dos/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-notsosecure-hacking-aws-cognito-misconfigurations/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-timeless-timing-attacks-exploiting-concurrency-leak-connections/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/securitum-com-securitum-leading-european-penetration-testing-company-3/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2020-portswigger-research-dom-clobbering-strikes-back/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-composition-kills-case-study-email-sender-authentication/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-melting-pot-origins-compromising-intermediary-web-websites/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/publications-cispa-saarland-pmforce-systematically-analyzing-postmessage-scale/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-carnus-exploring-privacy-threats-browser-extension-fingerprinting/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-cdn-judo-breaking-cdn-dos-protection-itself/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-fuse-finding-file-upload-bugs-penetration-testing/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cookie-hunter-automated-black-box-auditing-web-authentication-flaws/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-tale-two-headers-formal-analysis-inconsistent-click-jacking-web/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-deceptive-previews-study-link-preview-trustworthiness-platforms/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/remote-local-exacerbating-web-attacks-service-workers-caches/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/security-study-service-worker-cross-site-scripting/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/information-leaks-safaris-intelligent-tracking-prevention/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/versprite-how-secure-your-universally-unique-identifiers-uuids/</loc>
    <lastmod>2026-09-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-medium-dependency-confusion-how-i-hacked-apple-microsoft-dozens-companies/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-portswigger-research-http-2-sequel-always-worse/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-orange-tsai-new-attack-surface-ms-exchange-part-1/</loc>
    <lastmod>2026-08-07</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-s1r1us-ninja-s1r1us-prototype-pollution/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-portswigger-research-hidden-oauth-attack-vectors/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/youst-in-cache-poisoning-scale/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/bishop-fox-exploration-remediation-json-interoperability-vulnerabilities/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/intruder-io-practical-http-header-smuggling-sneaking-past-reverse-beyond/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-slideshare-http-request-smuggling-higher-http-versions/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/pt-swarm-fuzzing-xss-nested-parsers-condition/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-devcraft-io-universal-deserialisation-gadget-ruby-2-x-3-x/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/captainfreak-secret-parameter-lfr-potential-rce-nodejs-apps/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/immunityservices-blogspot-com-misconfigurations-java-xml-parsers/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/robertchen-cc-breaking-github-private-pages-35k/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sec-consult-forgot-password-taking-over-user-accounts-kaminsky-style/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-jfrog-critical-vulnerability-haproxy-cve-2021-40346-integer-smuggling/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/t-reqs-http-request-smuggling-differential-fuzzing/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-portswigger-research-ublock-i-exfiltrate-exploiting-ad-blockers-css/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/empirical-study-http-request-smuggling-servers-proxies/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-speaker-deck-weird-proxies-2-bit-magic/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/response-smuggling-pwning-http-1-1-connections/</loc>
    <lastmod>2026-08-06</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-blog-ryotak-net-remote-code-execution-homebrew-compromising-repository/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/youst-in-bypassing-2fa-using-openid-misconfiguration/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gccybermonks-com-pop-ups-good-world/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-opera-security-8-000-bug-bounty-highlight-xss-rce-opera-browser/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-microsoft-browser-vulnerability-research-guest-blog-post-attacking-devtools/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-blog-lbherrera-me-appcache-s-forgotten-tales/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/web-cache-deception-escalates/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-opera-security-bug-bounty-guest-post-local-file-read-stored-xss-browser/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/bishop-fox-lexss-bypassing-lexical-parsing-security-controls/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-tint0-com-ping-ing-xmlsec/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-gosecure-scientific-notation-bug-mysql-left-aws-waf-clients-injection/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-mattermost-com-securing-xml-implementations-across-web/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-slideshare-hotpics-2021/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-blog-ryotak-net-remote-code-execution-cdnjs-cloudflare/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-threatnix-io-exploiting-csp-webkit-break-authentication-authorization/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-starlabs-sg-you-talking-me/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/inputzero-io-play-opera-please/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-labs-detectify-hacking-cloudkit-how-i-accidentally-deleted-your-shortcuts/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-medium-turning-blind-error-based-sql-injection-exploitable-boolean-one/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/spookjs-com-spook-js/</loc>
    <lastmod>2026-08-08</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-org-prime-probe-1-javascript-0-overcoming-browser-based-side-defenses/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-tales-favicons-caches-persistent-tracking-modern-browsers/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-jaw-studying-client-side-csrf-hybrid-property-graphs-traversals/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-abusing-hidden-properties-attack-node-js-ecosystem/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/dns-cache-poisoning-attack-resurrections-side-channels/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-processing-dangerous-paths-security-privacy-portable-format/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/alpaca-attack-com-alpaca-attack/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-serialdetector-principled-practical-exploration-object-web/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-fingerprinting-style-detecting-browser-extensions-injected-sheets/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/the-chinese-university-of-hong-kong-revealer-detecting-vulnerabilities/</loc>
    <lastmod>2026-08-08</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-org-gummy-browsers-targeted-browser-spoofing-against-state-art-techniques/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-err-human-characterizing-threat-unintended-urls-social-media/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/talking-about-my-generation-targeted-dom-based-xss-exploit-generation-analysis/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/towards-lightweight-hybrid-approach-detecting-dom-xss-vulnerabilities-learning/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gremwell-improper-spring-query-usage-allows-n1ql-injection/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-httpvoid-research-finding-0day-hack-apple/</loc>
    <lastmod>2026-09-22</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-labs-detectify-account-hijacking-using-dirty-dancing-sign-oauth-flows/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-portswigger-research-browser-powered-desync-attacks-new-frontier-smuggling/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-sonar-zimbra-email-stealing-clear-text-credentials-memcache-injection/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hacking-cloud-saml/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/codewhitesec-blogspot-com-bypassing-net-serialization-binders/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-portswigger-research-making-http-header-injection-critical-poisoning/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-medium-worldwide-server-side-cache-poisoning-all-akamai-edge-nodes-earned/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-neil-madden-cve-2022-21449-psychic-signatures-java/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/mr-medi-github-io-practical-client-side-path-traversal-attacks/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-samcurry-net-exploiting-web3-s-hidden-attack-surface-universal-xss-library/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-sonar-disclosing-information-side-channel-django/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/synacktiv-php-filters-chain-what-it-how-use-it_translate/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-harel-security-research-caching-un-cacheables-abusing-url-parser-technique/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/pt-swarm-discovering-domains-time-correlation-attack-certificate-transparency/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/frameshifter-security-implications-http-2-http-1-conversion-anomalies/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-claroty-js-security-off-abusing-json-based-sql-bypass-waf/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-orange-tsai-let-s-dance-cache-destabilizing-hash-table-microsoft-iis/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-medium-story-leaking-uninitialized-memory-fastly/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-hypn-za-net-hacking-salesforce-backed-webapps/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/exploiting-inter-process-communication-sap-s-http-server/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sec-consult-melting-dns-iceberg-taking-over-your-infrastructure-kaminsky-style/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-jub0bs-com-great-samesite-confusion/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-medium-underrated-bugs-clickjacking-css-injection-drag-drop-xss-csrf/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/synacktiv-persistent-php-payloads-pngs-how-inject-php-code-image_translate/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/0xacb-com-till-recollapse/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/projectzero-google-gregor-samsa-exploiting-java-s-xml-signature-verification/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/pt-swarm-jetty-features-hacking-web-apps/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/invicti-com-ssrf-vulnerabilities-caused-sni-proxy-misconfigurations/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/av-tib-eu-csrf-resurrections/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-blog-of-viettel-cyber-security-deep-understand-aspx-file-handling-vectors/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-pyn3rd-github-io-arbitrary-file-upload-tricks-java/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-doyensec-com-apache-pinot-sqli-rce-cheat-sheet/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-doyensec-com-danger-falling-system-role-aws-sdk-client/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/electrovolt-pwning-popular-desktop-apps-while-uncovering-new-attack-slides/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-portswigger-research-hijacking-service-workers-dom-clobbering/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-medium-waf-bypasses-0days/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-medium-exploring-world-esi-injection/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/tttang-com-magic-way-xss-http-2_translate/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-medium-miracle-one-vulnerability-rule-them-all/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/pt-swarm-exploiting-arbitrary-object-instantiations-php-without-custom-classes/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/wya-pl-cve-2022-22947-spel-casting-evil-beans/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-blog-of-viettel-cyber-security-owassrf-tabshell-exploit-chain/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/assetnote-io-exploiting-static-site-generators-when-static-not-actually-static/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-jerkeby-se-what-prototype-poisoning-prototype-bugs-explained/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/intruder-io-guid-we-trust/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-pwn-ai-novel-attack-vector-bypass-csp-same-origin-method-execution-zeroday/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-hertzbleed-turning-power-side-channel-attacks-remote-timing-x86/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-fuzzorigin-detecting-uxss-vulnerabilities-browsers-through-fuzzing/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-rendering-contention-channel-made-practical-web-browsers/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-targeted-deanonymization-cache-side-channel-attacks-defenses/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2021-oren-lab-implementation-security-and-side-channel-attacks-fingerprinting/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-phish-sheep-s-clothing-exploring-authentication-fingerprinting/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/port-contention-goes-portable-port-contention-side-channels-web-browsers/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-identity-confusion-webview-based-mobile-app-app-ecosystems/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-portswigger-research-http-3-connection-contamination-upcoming-threat/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/microsoft-research-timing-based-browsing-privacy-vulnerabilities-site-isolation/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-dangers-human-touch-fingerprinting-browser-extensions-actions/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-probe-proto-measuring-client-side-prototype-pollution-websites/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/wobfuscator-obfuscating-javascript-malware-opportunistic-translation-webassembly/</loc>
    <lastmod>2026-08-17</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-get-out-automated-discovery-application-layer-censorship-strategies/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-counting-regexes-considered-harmful-exposing-redos-matchers/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-mining-node-js-vulnerabilities-object-dependence-graph-query/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-org-silent-spring-prototype-pollution-leads-remote-code-execution-node-js/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-org-pre-hijacked-accounts-empirical-study-security-failures-user-web/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-testability-tarpits-impact-code-patterns-security-applications/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-experimental-security-analysis-app-model-business-platforms/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-security-lottery-measuring-client-side-web-security-inconsistencies/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-characterizing-security-github-ci-workflows/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-leaky-forms-study-email-password-exfiltration-before-form-submission/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/code-white-net-remoting-revisited/</loc>
    <lastmod>2026-08-28</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/webspec/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-portswigger-research-bypassing-csp-dangling-iframes/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sok-exploring-current-future-research-directions-xs-leaks-through-model/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-github-problem-sharedstorage-s-described-use-k-anonymity/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hand-sanitizers-wild-large-scale-study-custom-javascript-sanitizer-functions/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-portswigger-finding-client-side-prototype-pollution-dom-invader/</loc>
    <lastmod>2026-09-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-measuring-mitigating-risk-ip-reuse-public-clouds/</loc>
    <lastmod>2026-09-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/moonactive-cypher-query-injection-new-sql-injection-we-not-aware-slides/</loc>
    <lastmod>2026-09-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ncc-group-exploring-prompt-injection-attacks/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-cider-security-ppe-poisoned-pipeline-execution/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-portswigger-research-smashing-state-machine-true-potential-web-conditions/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-trend-micro-zero-day-initiative-exploiting-hardened-net-whitepaper/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sec-consult-smtp-smuggling-spoofing-e-mails-worldwide/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/synacktiv-php-filter-chains-file-read-error-based-oracle_translate/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-rafa-s-security-researches-research-exploiting-http-parsers-inconsistencies/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/http-request-splitting-vulnerabilities-exploitation/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-speaker-deck-how-i-hacked-microsoft-teams-got-150-000-pwn2own/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-malicious-group-akamai-f5-ntlm-love/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-usenix-association-cookie-crumbles-breaking-fixing-web-session-paper/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-hackcompute-can-i-speak-your-manager-hacking-root-epp-servers-take-zones/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/positive-security-ransacking-your-password-reset-tokens/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-the-github-blog-mtls-when-certificate-authentication-done-wrong/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/trufflesecurity-com-bypass-firewalls-cors-typo-squatting-truffle-security-co/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-0day-click-rce-ldap-truncation-hg-mozilla-org/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-arxenix-s-blog-cookie-bugs-smuggling-injection/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/oauth-2-0-redirect-uri-validation-falls-short-literally/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-abdulrah33m-com-prototype-pollution-python/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-sonar-pretalx-vulnerabilities-how-get-accepted-every-conference/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-portswigger-research-blind-css-exfiltration-exfiltrate-unknown-web-pages/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-portswigger-research-server-side-prototype-pollution-black-box-dos/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/intruder-io-tricks-reliable-split-second-dns-rebinding-chrome-safari/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-ryan-html-over-wire/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-blog-ryotak-net-dom-based-race-condition-racing-browser-fun/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-medium-you-not-where-you-think-you-opera-browsers-address-vulnerabilities/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-johan-carlsson-cve-2022-4908-sop-bypass-chrome-using-navigation-api/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-web-insecurity-blog-sso-gadgets-escalate-self-xss-ato/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/three-new-attacks-against-json-web-tokens/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-lexfo-fr-introducing-wrapwrap-using-php-filters-wrap-file-prefix-suffix/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-doyensec-com-ssrf-cross-protocol-redirect-bypass/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-doyensec-com-new-vector-dirty-arbitrary-file-write-rce/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-gosecure-aws-waf-clients-left-vulnerable-sql-injection-due-choice/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-wiz-io-bingbang-aad-misconfiguration-led-bing-com-results-takeover/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-sorcery-ie-mybb-admin-panel-rce-cve-2023-41362/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-sonar-source-code-risk-critical-code-vulnerability-ci-cd-platform-teamcity/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-sonarsource-com-code-vulnerabilities-put-skiff-emails-risk/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-speaker-deck-how-break-saml-if-i-have-paws/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/codewhitesec-blogspot-com-jmx-exploitation-revisited/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/codewhitesec-blogspot-com-java-exploitation-restrictions-modern-jdk-times/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-lexfo-fr-unserializable-but-unreachable-remote-code-execution-vbulletin/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/soroush-me-cookieless-duodrop-iis-auth-bypass-app-pool-privesc-asp-net-36560/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-hakai-offensive-security-hunting-nginx-alias-traversals-wild/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sec-consult-dns-analyzer-finding-dns-vulnerabilities-burp-suite/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/salt-security-salt-labs-finds-oauth-abuse-used-take-over-accounts/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/descope-noauth-how-microsoft-oauth-misconfiguration-can-lead-full-takeover/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-ostorlab-ostorlab-mobile-app-security-testing-android-ios/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/github-greshake-llm-security/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/nccgroup-com-state-dns-rebinding-2023/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/vulncheck-fileless-remote-code-execution-juniper-firewalls-blog/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/soroush-me-thirteen-years-advancing-understanding-iis-short-file-disclosure/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-ottersec-metamask-snaps-playing-sand/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/derineryilmaz-com-uncovering-crazy-privilege-escalation-chrome-extensions/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-sonar-code-vulnerabilities-put-proton-mails-risk/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-medium-hacking-grpc-web/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hackerone-yelp-disclosed-hackerone-yelp-com-biz-yelp-com-ato-xss/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-medium-xss-gmail-dynamic-email-amp-email/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-praetorian-technical-advisory-azure-b2c-crypto-misuse-account-compromise/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-praetorian-refresh-compromising-f5-big-ip-request-smuggling/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-tenable-emojideploy-smile-your-azure-web-service-just-got-rced/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-adnan-khan-security-research-one-supply-chain-attack-rule-them-all/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/lude-rs-draw-io-cves/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/karimrahal-com-leaking-secrets-github-actions-reading-files-environment-memory/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/github-musana-fuzzuli/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-palo-alto-networks-blog-github-actions-worm-compromising-github-tree/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-nadir-s-blog-innocent-client-side-path-traversal-account-takeover/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-medium-trpc-security-research-hunting-vulnerabilities-modern-apis/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/chained-hit-discovering-new-vectors-gain-remote-root-access-sap-software/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-sicuranext-blog-aws-waf-bypass-invalid-json-object-unicode-escape-sequences/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/btlfry-gitlab-io-memcached-command-injections-pylibmc/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/leaky-web-automated-discovery-cross-site-information-leaks-browsers-web/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-diffcsp-finding-browser-bugs-content-security-policy-testing/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-isolated-exhausted-attacking-operating-systems-site-isolation-browser/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/scaling-javascript-abstract-interpretation-detect-exploit-node-js-vulnerability/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-rb-ransomware-over-modern-web-browsers/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-giancarlo-pellegrino-it-s-dom-clobbering-time-attack-techniques-defenses/</loc>
    <lastmod>2026-08-08</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/casa-cyber-security-in-the-age-of-large-scale-adversaries-finding-all-browsers/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-synthdb-synthesizing-database-program-analysis-applications/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/fashion-faux-pas-implicit-stylistic-fingerprints-bypassing-browsers-defenses/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-navigating-murky-waters-automated-browser-feature-vectors/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/coco-efficient-browser-extension-vulnerability-detection-interpretation/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-quicforge-client-side-request-forgery-quic/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-org-uncovering-exploiting-hidden-apis-mobile-super-apps/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-checking-passwords-leaky-computers-side-channel-analysis-protocol/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-security-study-about-electron-applications-functionalities/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-extending-hand-attackers-browser-privilege-escalation-extensions/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/second-breakfast-implicit-mutation-based-serialization-vulnerabilities-net/</loc>
    <lastmod>2026-08-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/code-white-exploiting-asp-net-templateparser-part-i-sitecore-cve-2023-35813/</loc>
    <lastmod>2026-08-28</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/elttam-com-cracking-odd-case-randomness-java/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-github-leaking-more-than-log-2-urls-bits-data-selecturl-gate/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-blog-arkark-dev-seccon-ctf-2023-finals-author-writeups/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-voorivex-hijacking-oauth-code-reverse-proxy-account-takeover/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/netwrix-generating-deserialization-payloads-messagepack-c-s-typeless-mode/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/elttam-pwnassistant-controlling-home-s-home-assistant-rce/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/projectdiscovery-adobe-coldfusion-pre-auth-rce-s-projectdiscovery-blog/</loc>
    <lastmod>2026-09-22</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-orange-tsai-confusion-attacks-exploiting-hidden-semantic-ambiguity-server/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-sonarsource-sql-injection-isn-t-dead-smuggling-queries-protocol-slides/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-bugcrowd-unveiling-te-0-http-request-smuggling-discovering-websites/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-orange-tsai-worstfit-unveiling-hidden-transformers-windows-ansi/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/mizu-re-exploring-dompurify-library-bypasses-fixes-1-2/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-doubleclickjacking-new-era-ui-redressing/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-codeanlabs-cve-2024-4367-arbitrary-javascript-execution-pdf-js/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-voorivex-team-oauth-non-happy-path-ato/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-harel-security-research-chatgpt-account-takeover-wildcard-web-deception/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-snyk-labs-hijacking-oauth-flows-cookie-tossing/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-portswigger-research-gotta-cache-em-all-bending-rules-web-exploitation/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-portswigger-research-splitting-email-atom-exploiting-parsers-controls/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-portswigger-research-listen-whispers-web-timing-attacks-that-actually-work/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/assetnote-io-insecurity-through-censorship-vulnerabilities-caused-great-firewall/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-portswigger-research-bypassing-wafs-phantom-version-cookie/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-sonar-why-code-security-matters-even-hardened-environments/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/srcincite-io-remote-code-execution-spring-properties/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-pspaul-s-blog-bench-press-leaking-text-nodes-css/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/pt-swarm-source-code-disclosure-asp-net-apps/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/github-narfindustries-http-garden/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/elttam-com-plormbing-your-prisma-orm-time-based-attacks/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-lexfo-fr-introducing-lightyear-new-way-dump-php-files/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/nastystereo-com-ruby-rails-json-juggling-attack/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-sonar-encoding-differentials-why-charset-matters/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-doyensec-com-race-bottom-database-transactions-undermining-your-appsec/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-sicuranext-blog-response-filter-denial-service-rfdos-shut-down-rule/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gitlab-com-gitlab-io-devfile-file-write-vulnerability-gitlab/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-sicuranext-blog-breaking-down-multipart-parsers-file-upload-bypass/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-ottersec-supply-chain-attacks-new-era/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/abusing-intended-feature-bypassing-facial-recognition/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-medium-arc-browser-uxss-local-file-read-arbitrary-file-creation-path-rce/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-gmo-flatt-security-research-beyond-limit-expanding-single-packet-limit/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-nowotarski-info-http-2-continuation-flood-technical-details/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-0x999-exploring-javascript-events-bypassing-wafs-character-normalization/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-conviso-appsec-arbitrary-file-write-rce-restricted-rails-apps_translate/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/buer-haus-go-go-xss-gadgets-chaining-dom-clobbering-exploit-wild/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/bastionsecurity-co-nz-statamic-cms/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-borna-nematzadeh-exploiting-number-parsers-javascript/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/aeth-cc-en-unsecure-time-based-secret-sandwich-attack-analysis-my-research-tool/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/evil-blog-cross-window-forgery-new-class-web-attack/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-doyensec-com-exploiting-client-side-path-traversal-perform-cross-forgery/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-doyensec-com-class-pollution-ruby-deep-dive-exploiting-recursive-merges/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-doyensec-com-unveiling-prototype-pollution-gadgets-finder/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/break-wall-bottom-automated-discovery-protocol-level-evasion-firewalls/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-blog-slonser-info-old-new-email-attacks/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-blog-slonser-info-cve-2023-5480-chrome-new-xss-vector/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-medium-wormable-xss-www-bing-com/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gccybermonks-com-another-vision-ssrf/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-blogger-lost-translation-exploiting-unicode-normalization/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-speaker-deck-piloting-edge-copilot/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-web-insecurity-blog-post-xss-leveraging-pseudo-protocols-gain-flows/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-sudis-blog-bypassing-csp-url-parser-confusions-xss-netlifys-image-cdn/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-lexfo-fr-iconv-set-charset-rce-exploiting-glibc-hack-php-engine-part-3/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-harel-security-research-zoom-session-takeover-cookie-tossing-abuse/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-codesent-unveiling-rhinos-blind-spot-exploiting-custom-code-apigee/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/pentest-blog-advisory-netmodule-router-software-race-condition-leads-execution/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-sonar-excessive-expansion-uncovering-critical-security-jenkins/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-sonar-joomla-php-bug-introduces-multiple-xss-vulnerabilities/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gudifu-guided-differential-fuzzing-http-request-parsing-discrepancies/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-decrypt-lol-mssql-identified-as-vulnerable-emoji-string-exploitation/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/nastystereo-com-ruby-3-4-universal-rce-deserialization-gadget-chain-com/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-securing-cve-2024-50603-aviatrix-network-controller-command-vulnerability/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-outpost24-exploiting-trust-weaponizing-permissive-cors-configurations/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-truesec-attacking-powershell-clixml-deserialization/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/projectdiscovery-ruby-saml-gitlab-authentication-bypass-cve-2024-45409/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-phrack-world-select-only-postgresql-injections/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-unit-42-artipacked-hacking-giants-through-race-condition-github-artifacts/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-samcurry-net-hacking-millions-modems-investigating-who-hacked-my-modem/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/exploiting-unexploitable-insights-kibana-bug-bounty/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/code-white-com-teaching-old-net-remoting-new-exploitation-tricks/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/efficient-detection-java-deserialization-gadget-chains-bottom-up-construction/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/undefined-oriented-programming-detecting-chaining-prototype-consequences/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/srcincite-io-jndi-injection-remote-code-execution-memoryuserdatabasefactory/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/synacktiv-github-actions-exploitation-untrusted-input_translate/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/deep-dive-openapi-security/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/aeth-cc-en-multi-sandwich-attack-mongodb-object-id-scenario-real-time-attack/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/secret-web-hacking-knowledge/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/messenger-bug-hunting-bug-s-end-end-lifecycle/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-voorivex-team-android-hook-rce-5000-bounty/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-el-mehdi-mrhassel-xss-vulnerabilities-excalidraw-affecting-meta-cve-32472/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/gist-1-bug-50-000-bounties-how-zendesk-intentionally-left-backdoor-companies/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-samcurry-net-hacking-kia-remotely-controlling-cars-just-license-plate/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-lyra-s-epic-blog-using-youtube-steal-your-files/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-matanber-com-bidding-like-billionaire-stealing-nfts-4-char-cstis/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/assetnote-io-chaining-three-bugs-access-all-your-servicenow-data/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-spaceraccoon-dev-universal-code-execution-chaining-messages-extensions/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-blog-xss-am-leaking-jupyter-instance-auth-token-chaining-cve-2023-bug/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-zhero-web-security-next-js-cache-poisoning-quest-black-hole/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-matanber-com-bypassing-wafs-exploit-cspt-using-encoding-levels/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-gmo-flatt-security-research-batbadbut-you-can-t-securely-execute-windows/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-speaker-deck-xss-using-dirty-content-type-cloud-era/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/projectdiscovery-hello-lucee-let-us-hack-apple-again/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-skii-dev-rook-xss-how-i-hacked-chess-com-rookie-exploit/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-spaceraccoon-dev-back-clip-board-microsoft-whiteboard-excalidraw-26140/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2023-blog-ryotak-net-cloudflare-pages_translate/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/piotr-bazydo-chudy-half-measures-full-compromise-exploiting-microsoft-remoting/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/securitum-com-soql-injection-how-exfiltrate-sensitive-data-real-world-pentests/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/securitum-com-few-steps-how-take-over-whole-application/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/securitum-com-crashing-servers-digits-floating-point-numbers-dos-vulnerabilities/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-medium-user-info-extraction-abusing-placeholder-injection-zendesk/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-medium-authorization-bypass-due-cache-misconfiguration/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-dancer-dark-synthesizing-evaluating-polyglots-blind-cross-scripting/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/parse-me-baby-one-more-time-bypassing-html-sanitizer-parsing-differentials/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/soroush-me-mongodb-nosql-injection-aggregation-pipelines/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-amberwolf-com-delinea-protocol-handler-remote-code-execution-update-12908/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/trufflesecurity-com-anyone-can-access-deleted-private-repository-data-github-co/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/elttam-com-plormbing-your-django-orm/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-medium-quick-note-how-build-codeql-db-closed-source-project-net-assembly_translate/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-zero-day-initiative-zero-day-initiative-abusing-arbitrary-file-tricks/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-github-security-lab-ghsl-2024-312-arbitrary-code-execution-secret-portal/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/assetnote-io-how-obscure-php-footgun-led-rce-craft-cms/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-zero-day-initiative-zero-day-initiative-solarwinds-access-rights-all/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-blog-pyn3rd-com-databricks-jdbc-attack-jaas/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/nastystereo-com-gem-safemarshal-escape/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/tiraniddo-dev-working-your-way-around-acl/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-medium-cve-202350220-inductive-automation-ignition-xml-deserialization-rce_translate/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-zero-day-initiative-zero-day-initiative-exploiting-exchange-powershell-1/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/new-attack-interface-java-application/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-snailload-exploiting-remote-network-latency-measurements-javascript/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/rolandczerny-com-generic-automated-drive-gpu-cache-attacks-browser/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-web-platform-threats-automated-detection-web-security-issues-wpt/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-cdn-cannon-exploiting-cdn-back-origin-strategies-attacks/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-ghunter-universal-prototype-pollution-gadgets-javascript-runtimes/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-argus-all-your-php-injection-sinks-belong-us/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-flushing-attack-dns-cache/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-pixel-thief-exploiting-svg-filter-leakage-firefox-chrome/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/internet-s-invisible-enemy-detecting-measuring-web-cache-poisoning-wild/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-vulnerability-oriented-testing-restful-apis/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/peeking-through-window-fingerprinting-browser-extensions-through-interactions/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/fuzzcache-optimizing-web-application-fuzzing-through-software-based-data-cache/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/reactappscan-mining-react-application-vulnerabilities-component-graph/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-ucla-security-lab-authsaber-automated-safety-verification-openid-programs/</loc>
    <lastmod>2026-08-08</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-spider-scents-grey-box-database-aware-web-scanning-stored-xss/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-rise-inspectron-automated-black-box-auditing-cross-platform-apps/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-arcanum-detecting-evaluating-privacy-risks-browser-content/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-portswigger-research-introducing-url-validation-bypass-cheat-sheet/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-portswigger-research-fickle-pdfs-exploiting-browser-rendering-discrepancies/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-portswigger-research-concealing-payloads-url-credentials/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-portswigger-research-introducing-signsaboteur-forge-signed-web-tokens-ease/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/leaking-objrefs-exploit-http-net-remoting/</loc>
    <lastmod>2026-08-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-orange-tsai-cve-2024-4577-yet-another-php-rce-make-php-cgi-argument-again/</loc>
    <lastmod>2026-08-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-watchtowr-labs-we-spent-20-achieve-rce-accidentally-became-admins-mobi/</loc>
    <lastmod>2026-08-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-yeswehack-limitations-just-illusion-advanced-server-side-everywhere/</loc>
    <lastmod>2026-09-02</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/zeroed-tech-view-state-unpatchable-iis-forever-day-being-actively-exploited/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-github-shared-storage-return-times-outside-worklet-appear-be-worklet/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-voorivex-account-takeover-due-dns-rebinding/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/projectdiscovery-hacking-apple-sql-injection-remote-code-execution-blog/</loc>
    <lastmod>2026-09-22</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/projectdiscovery-github-enterprise-saml-authentication-bypass-cve-2024-blog/</loc>
    <lastmod>2026-09-22</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/github-successful-errors-new-code-injection-ssti-techniques-paper/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/elttam-com-orm-leaking-more-than-you-joined/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-searchlight-cyber-novel-ssrf-technique-involving-http-redirect-loops/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/black-hat-lost-translation-exploiting-unicode-normalization-slides/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-watchtowr-labs-soapwn-pwning-net-framework-applications-through-http-wsdl/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-blog-arkark-dev-cross-site-etag-length-leak/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-zhero-web-security-next-js-cache-chains-stale-elixir/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-salvatore-abello-s-blog-xss-leak-leaking-cross-origin-redirects/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-flomb-net-playing-http-2-connect/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/0day-click-parser-differentials-when-interpretation-becomes-vulnerability/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-portswigger-research-http-1-1-must-die-desync-endgame/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-zhero-web-security-eclipse-next-js-conditioned-exploitation-condition/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-the-trail-of-bits-blog-unexpected-security-footguns-go-s-parsers/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/mizu-re-under-beamer/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/opossum-attack-com-opossum-attack/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-portswigger-research-fragile-lock-novel-bypasses-saml-authentication/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2022-medium-finding-unseen-sql-injection-bypassing-escape-functions-mysql/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-mantrainfosec-com-prepared-statements-prepared-be-vulnerable/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-w4ke-info-funky-chunks-abusing-ambiguous-chunk-line-terminators-smuggling/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-w4ke-info-funky-chunks-addendum-few-more-dirty-tricks/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-include-security-research-blog-cross-site-websocket-hijacking-2025/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-lyra-s-epic-blog-svg-clickjacking/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/jorianwoltjer-com-nonce-csp-bypass-using-disk-cache/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-blog-arkark-dev-forcing-quirks-mode-php-warnings-css-exfiltration-requests/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-marektoth-com-dom-based-extension-clickjacking-your-password-manager-risk/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-medium-google-cloud-account-takeover-url-parsing-confusion/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-medium-how-i-accessed-1-800-company-livestreams-uncovered-new-web-rre/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/sideni-xyz-exploiting-not-so-misuse-resistant-authenticated-encryption-openssl/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-bubu-permission-hijacking-scale/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-critical-thinking-bug-bounty-podcast-stopping-redirects/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-critical-thinking-bug-bounty-podcast-asp-net-mvc-view-engine-patterns/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-critical-thinking-bug-bounty-podcast-bypassing-csp-new-relic-custom-events/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-critical-thinking-bug-bounty-podcast-crlf-injection-nested-response-gadget/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-wiz-io-cve-2025-1974-ingressnightmare-kubernetes/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-exploit-azerbaijan-redisclosure-new-technique-exploiting-full-text-study/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-siunam-s-website-python-dirty-arbitrary-file-write-rce-writing-files/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-blog-of-viettel-cyber-security-sharepoint-toolshell-one-request-53770/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/aikido-security-prompt-injection-inside-github-actions-new-frontier-attacks/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-medium-attacks-new-oauth-flow-authorization-code-injection-whether-bff/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/pt-swarm-blind-trust-what-hidden-behind-process-creating-your-pdf-file/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/pt-swarm-impossible-xxe-php/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-blog-isec-pl-disguises-zip-past-path-traversal/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-valentinos-issue-tracker-hacking-gemini-multi-layered-approach/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/weixin-official-accounts-platform-make-xxe-attacks-brilliant-again_translate/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-blog-slonser-info-make-self-xss-great-again/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-critical-thinking-bug-bounty-podcast-vega-cve-2025-59840-unusual-chains/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/adragos-ro-fontleak-exfiltrating-text-using-css-ligatures/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/assured-ab-single-packet-shovel-digging-desync-powered-request-tunnelling/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/nastystereo-com-ruby-array-pack-bleed/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cyberark-racing-fuzzing-http-3-open-sourcing-quicdraw-h3/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-ottersec-how-we-broke-exchanges-deep-dive-authentication-client-side-bugs/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-medium-client-side-path-traversal-cspt-bug-bounty-reports-techniques/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/github-permissionjacking-how-subtle-bug-safari-could-lead-camera-hijacking/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-appliance/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2024-fortbridge-vesta-admin-takeover-exploiting-reduced-seed-entropy-bash-random/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-zhero-web-security-astro-framework-standards-weaponization/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/galbarnahum-com-madeyoureset-technical-details/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-securing-cve-2025-26788-passkey-authentication-bypass-strongkey-fido-server/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-searchlight-cyber-novel-sql-injection-technique-pdo-prepared-statements/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-medium-temenos-ofs-field-injection-revealing-hidden-financial-attack-vector/</loc>
    <lastmod>2026-08-15</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-malicious-group-quiet-side-channel-smuggling-cl-0-c2/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/aretekzs-com-fuzzing-websockets-server-side-vulnerabilities/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/eva-ac-how-hack-discord-vercel-more-one-easy-trick/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-yeswehack-minefield-between-syntaxes-exploit-syntax-confusion-wild/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/react2shell-com-react2shell-cve-2025-55182/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-sebsrt-sebastiano-sartor-trailing-danger-exploring-http-discrepancies/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-portswigger-research-inline-style-exfiltration-leaking-data-conditionals/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-my-zip-isn-t-your-zip-identifying-exploiting-semantic-gaps-parsers/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-stek-sharing-not-caring-bypassing-tls-authentication-web-tickets/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-cascading-spy-sheets-exploiting-complexity-modern-fingerprinting/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-automatic-insecurity-exploring-email-auto-configuration-wild/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-posthammer-pervasive-browser-based-rowhammer-attacks-commands/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-evocrawl-exploring-web-application-code-state-using-search/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-portswigger-research-saml-roulette-hacker-always-wins/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/doi-org-racedb-detecting-request-race-vulnerabilities-database-applications/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-nodemedic-fine-automatic-detection-exploit-vulnerabilities/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-cross-origin-web-attacks-http-2-server-push-signed-http-exchange/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-do-not-follow-white-rabbit-challenging-myth-harmless-redirection/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-phishing-attacks-against-password-manager-browser-extensions/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-universal-cross-app-attacks-exploiting-securing-oauth-2-0-platforms/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-voorivex-team-cloudflare-image-proxy-as-cspt-gadget-cross-origin-exploit/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/styled-steal-overlooked-attack-surface-email-clients/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-watchtowr-labs-8-million-requests-later-we-made-solarwinds-supply-amateur/</loc>
    <lastmod>2026-08-12</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/elttam-com-new-method-leverage-unsafe-reflection-deserialisation-rce-rails/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-network-level-prompt-trait-leakage-local-research-agents/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/concordia-university-detecting-prototype-pollution-npm-packages-proof-exploits/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/github-transparent-taint-style-vulnerability-detection-generic-single-page-code/</loc>
    <lastmod>2026-09-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/one-email-many-faces-deep-dive-identity-confusion-email-aliases/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/be-aware-what-you-let-pass-demystifying-url-based-authentication-applications/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/power-never-be-wrong-evasions-anachronistic-attacks-against-web-archives/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/dom-we-trust-exploring-hidden-dangers-reading-dom-web/</loc>
    <lastmod>2026-09-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-voorivex-css-data-exfiltration-steal-oauth-token/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-voorivex-puny-code-0-click-account-takeover/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-voorivex-stealing-oauth-token-referrer-policy-override/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-watchtowr-more-than-dos-progress-telerik-ui-asp-net-ajax-unsafe-3600/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-watchtowr-bypassing-authentication-like-it-s-90s-pre-auth-rce-chain-s-cms/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-watchtowr-cache-me-if-you-can-sitecore-experience-platform-cache-rce/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-watchtowr-executive-order-we-banning-blacklists-domain-level-rce-23120/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/elttam-gotchas-email-parsing-lessons-jakarta-mail/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/acm-rebirthday-attack-reviving-dns-cache-poisoning-birthday-paradox/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/zenodo-mercuriuzz-novel-black-box-fuzzing-framework-designed-implementations/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-icings-blog-hpack-bombing-apache/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/figshare-pangolin-publicly-available-permanent-version/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/university-of-illinois-chicago-zenodo-artifact-vault-raider-environments/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-hacktron-ai-supapwn-hacking-our-way-lovable-s-office-helping-supabase/</loc>
    <lastmod>2026-09-22</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/windsurf-dns-rebinding-against-a-local-ai-coding-service/</loc>
    <lastmod>2025-06-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-hacktron-ai-securing-perplexitys-ai-browser-one-click-uxss/</loc>
    <lastmod>2026-09-22</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2025-hacktron-ai-pwning-openai-atlas-through-exposed-browser-internals/</loc>
    <lastmod>2026-09-22</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/projectdiscovery-cve-2024-53991-discourse-backup-disclosure-rails-send-blog/</loc>
    <lastmod>2026-09-22</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-yeswehack-cache-key-injection-smuggling-poison-through-door/</loc>
    <lastmod>2026-09-18</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-security-2026-breaking-boundaries-analyzing-quic-frame-packet-attacker/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-web-cache-overflow-exploiting-imprecise-keys-cache-degradation-beyond/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/formal-analysis-agent-payment-protocols/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/time-ackrobatics-abusing-tcp-timestamps-improve-remote-timing-attacks/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-portswigger-research-can-ai-do-novel-security-research-meet-http-terminator/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/one-char-rule-them-all-dns-silent-vulnerabilities-domain-name-resolution/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-alias-equals-zone-large-scale-stealthy-takeover-domain-verification/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-portswigger-research-crlf-powered-desync-attacks-beheading-http-streams/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-calif-codex-discovered-hidden-http-2-bomb/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-when-http-402-meets-blockchain-risks-emerging-x402-payments/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/dns-cache-poisoning-like-it-s-2006/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/analyzing-webrtc-ecosystem-breaking-authentication-dtls-srtp/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-pwn-ai-xss2shell-wordpress-preauth-xss-rce-chain-cve-2026-64638/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-critical-thinking-zero-click-rce-figma-desktop/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-cure53-dompurify-xss-selectedcontent-re-clone/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-critical-thinking-dot-dot-slash-that-frameworks-hand-you-cspt-framework/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-voorivex-usual-suspect-type-confusion-twelve-bytes/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-portswigger-what-s-tag-name-javascript-apparently/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-portswigger-research-css-bomb-inside-your-inbox/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-searchlight-cyber-two-bypasses-chromes-sanitizer-api/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/your-sites-truly-isolated-automatically-detecting-logic-bugs-implementations/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ammar-s-blog-1-click-github-token-stealing-vscode-bug/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-zhero-web-security-one-trigram-time-xsleak-universal-css-injection-dos-gx/</loc>
    <lastmod>2026-08-08</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-critical-thinking-bug-bounty-podcast-parse-parse-mime-differential/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-voorivex-team-we-need-talk-about-csrf-again/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-voorivex-team-javascript-functions-overload-confusion/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/buizz-finding-policy-enforcement-bugs-interaction-simulation-browser-interface/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-critical-thinking-bug-bounty-podcast-solving-orb-mystery/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/mizu-re-dompurify-3-2-6-bypass-smil-animatetransform-safari-tags-article-web/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/pt-swarm-click-that-shouldnt-have-worked-rce-clickjacking-internet-explorer/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/masks-we-think-we-wear-privacy-threats-browser-extension-wallets-web3-ecosystem/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-hacktron-ai-170k-bypasses-vercel-react2shell-challenge/</loc>
    <lastmod>2026-09-22</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-tanto-security-padding-oracle-shell-unauthenticated-rce-telerik-ui-ajax/</loc>
    <lastmod>2026-09-18</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/compromising-cleo-harmony-a-saml-bypass-chain-to-arbitrary-code-execution/</loc>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/blog-lexfo-fr-casse-spip-unauthenticated-sql-injection-remote-command-execution/</loc>
    <lastmod>2026-09-18</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-watchtowr-labs-why-use-app-level-auth-when-every-database-has-auth-rce/</loc>
    <lastmod>2026-09-18</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-watchtowr-labs-youre-not-supposed-sharefile-everyone-progress-2701/</loc>
    <lastmod>2026-09-18</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-anvil-secure-exploiting-aql-injection-vulnerabilities-arangodb/</loc>
    <lastmod>2026-09-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-babelo-elf-pixels-building-shared-objectimage-polyglots/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-ethiack-kindarails2shell-how-matlab-file-reads-your-secrets-pops-rails/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-voorivex-three-0-day-vulnerabilities-adminer/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/elttam-cruising-shells-flowise/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/searchlight-cyber-almost-impossible-java-deserialization-through-services/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-zhero-web-security-avoiding-paradox-native-full-read-ssrf-one-sveltekit/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/slcyber-io-out-bounds-out-sandbox-rce-go-javascript-engine/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/transformers-dark-side-type-weaponizing-conversion-layer/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/get-set-exploit-unveiling-python-class-pollution-wild/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ethiack-write-once-shell-everywhere-turning-arbitrary-file-writes-rce/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hackerone-node-js-disclosed-hackerone-hashdos-v8/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/atredis-partners-finding-gadgets-like-its-2026/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-gmo-flatt-security-blog-awssdkurl_translate/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-gmo-flatt-security-research-remote-command-execution-google-cloud-deletion/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cast-attack-new-threat-posed-ghost-bits-java/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/mizu-re-fcsc-2026-writeups/</loc>
    <lastmod>2026-08-16</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/searchlight-cyber-exploit-brokers-pay-500-000-wordpress-rce-i-found-one-gpt5-25/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-searchlight-cyber-smashing-servicenow-sandbox-pre-authentication-rce/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/elttam-com-your-house-has-ffmpeg-problem/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/elttam-com-ruby-4-0-universal-rce-deserialization-gadget-chain/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/regular-expression-denial-service-induced-backreferences/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/melting-flesh-php-s-memory-hardening/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-hacktron-ai-when-your-vpn-opens-your-private-network-public/</loc>
    <lastmod>2026-09-22</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-watchtowr-labs-internet-falling-down-falling-down-falling-down-41940/</loc>
    <lastmod>2026-09-18</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-security-2026-when-authorization-loses-its-meaning-breaking-payments/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ernw-istio-security-considerations-istios-crds-namespace-based-multi-tenancy/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/spotit-def-con-34-this-message-sent-microsoft-turning-microsoft-apps-platform/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/whoareme-com-15k-cspt-full-account-takeover-then-2fa-bypass-prototype-chain/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-dsinternals-upcoming-talk-pass-passkey-family-attacks-black-hat-usa-26/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/astrix-security-sub-jugation-hijacking-cloud-identities-recycling-issuers/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-dirkjanm-io-borrowing-windows-hello-keys-authentication-persistence/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/autofail-breaking-web-boundaries-using-androids-autofill-framework/</loc>
    <lastmod>2026-09-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-iacr-cryptology-eprint-archive-zero-knowledge-about-encryption-managers/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/token-time-bomb-evaluating-jwt-implementations-vulnerability-discovery/</loc>
    <lastmod>2026-08-14</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-org-state-passkeys-studying-adoption-security-passkeys-web/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-brave-zklogin-when-zkp-not-enough/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/leakylinks-measuring-security-privacy-risks-url-scanning-services/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-hacktron-ai-rce-google-s-ai-code-editor-antigravity/</loc>
    <lastmod>2026-09-22</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/envade-hidden-env-becomes-one-click-remote-code-execution-vs-code-report/</loc>
    <lastmod>2026-09-18</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/promptfiction-hijacking-claude-desktop-through-claude-url-scheme-report/</loc>
    <lastmod>2026-09-18</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/star-labs-race-against-patch-four-exploit-chains-litellm/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-trail-of-bits-sorry-state-skill-distribution/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-varonis-threat-labs-searchleak-parameter-prompt-injection-microsoft-copilot/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-zenity-labs-agentforger-chatgpt-cross-site-agent-forgery/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-ayush-paul-memory-heist/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-zenity-labs-grand-theft-atlas/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-zenity-labs-claude-chrome-alert-1-full-account-takeover/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-embrace-the-red-computer-use-toctou-what-you-click-not-what-you-get/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-what-s-your-agent-s-context-context-privilege-escalation-attacks-harness/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-inference-time-backdoors-chat-templates-llm-supply-chains-compromise/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-intigriti-hacking-ai-customer-service-agents/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/cache-me-catch-you-exploiting-llm-caching-layers-vllm-gptcache-friends/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/no-tools-required-post-injection-exploitation-across-ai-agent-frameworks/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/one-chain-own-them-all-breaking-ai-infrastructures/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-check-point-research-when-agentic-glue-melts-exploiting-cloudflare-workers/</loc>
    <lastmod>2026-08-08</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/role-confusion-github-io-prompt-injection-as-role-confusion/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/corebreak-attack-turning-ai-agents-credentials-exfiltration-vectors/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-gmo-flatt-security-research-poisoning-claude-code-one-github-issue-chain/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/chatmate-remote-prompt-execution-ai-assistants-through-sandbox-escaping/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/agent-security-cs-washington-edu-agentic-browsers-same-origin-policy/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/your-waf-blocked-us-that-exploit-remote-agent-takeover-cloudflare-sentry-day/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hacking-your-life-ai-can-get-you-hacked-how-ai-orchestration-platforms-design/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-brave-privacy-risks-agentic-oversharing-web/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/lgtm-bypassing-llm-build-gate-when-prompt-injection-fails/</loc>
    <lastmod>2026-08-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-org-first-measurement-study-authentication-security-real-world-servers/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-org-stealing-reasoning-traces-proprietary-llm-apis/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hijackkv-new-threat-position-independent-kv-cache-reuse/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/muzzle-adaptive-agentic-red-teaming-web-agents-against-indirect-prompt-injection/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-gmo-flatt-security-research-pwning-claude-code-8-different-ways/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/overcoming-retrieval-barrier-indirect-prompt-injection-wild-llm-systems/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/site-isolation-dead-how-site-isolation-broken-agentic-browsers-extensions/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ndss-symposium-when-cache-poisoning-meets-llm-systems-semantic-countermeasures/</loc>
    <lastmod>2026-08-19</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/black-hat-usa-2026-scanning-scanners-turning-security-vendors-supply-weapons/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/synacktiv-caught-octopus-trap-unauthenticated-rce-argo-cd/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/boost-security-labs-living-off-pipeline-defensive-research-weaponized-brisket/</loc>
    <lastmod>2026-09-09</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-adnan-khan-security-research-turning-almost-nothing-supply-chain-poisoning/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hack-source-source/</loc>
    <lastmod>2026-08-11</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/boost-security-labs-deployment-poisoning-nother-novel-attack-vector-actions/</loc>
    <lastmod>2026-08-10</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/star-labs-three-bugs-walk-pdf-prototype-pollution-served-cold/</loc>
    <lastmod>2026-09-18</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-wiz-research-github-rce-vulnerability-cve-2026-3854/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/guardio-labs-hermeticreader-turning-adobe-s-300m-install-extension-takeover/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-palo-alto-networks-unit-42-pass-passkey-novel-attack-authentication/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-zhero-web-sec-re-cache-excessive-reflection-type-confusion-0-click-sxss-js/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/usenix-h3act-automated-measuring-semantic-conversion-anomalies-http-3-http-copy/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/elttam-exploiting-auth0-defaults-xss-attacks/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/jorian-woltjer-l3akctf-2026-squid/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/project-sekai-sekaictf-2026-filtered-reality-solution/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-wiz-io-breaking-litellm-auth-bypass-cloud-compromise/</loc>
    <lastmod>2026-09-18</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-slonser-never-trust-output-data-pollution-ai-agents-mcp/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/node-js-project-fix-unicode-dot-hostname-normalization-tls-verification/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-novee-security-critical-flaws-anthropic-google-openais-coding-agents/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/aikido-security-eight-high-severity-vulnerabilities-nodebb/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/lexfo-ambionics-drupal-postgresql-sql-injection-select-only-rce/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/searchlight-cyber-new-age-collisions-reading-arbitrary-files-pre-auth-as-29205/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/jorian-woltjer-finding-xss-shazzer-literally/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-cyera-research-sandcastles-not-sandboxes-how-one-architectural-products/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/bugcrowd-blind-enumeration-private-card-names-sort-oracle-id-discovery/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/elttam-golang-code-review-notes-ii/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-cyera-research-proto6-schema-not-supposed-run/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/boost-security-labs-trusted-publishing-untrusted-branch-inside-red-compromise/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-voorivex-content-type-override-stored-xss-public-objects/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/pt-swarm-hack-elephant-one-bite-time-nul-byte-sql-injection-pdo-firebird-pgsql/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/doyensec-when-filenames-become-attack-surfaces-weaponizing-nasa-s-syntax/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/synacktiv-charting-your-way-helm-template-injection/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/def-con-gotta-phish-em-all-novel-attack-techniques-persistent-browser-middle/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-appomni-bodysnatcher-agentic-hijacking-servicenow/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/def-con-no-socket-no-privs-no-problem-weaponizing-oci-registries-ssrf-escapes/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/black-hat-usa-beyond-normalization-expanding-unicode-attack-surface/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-habr-cve-2026-21876-multipart-charset-validation-bypass-owasp-crs_translate/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/anvil-secure-beyond-ceremony-2026-passkey-attack-surface/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/searchlight-cyber-keys-kingdom-anonymous-sql-injection-drupal-core-cve-2026-9082/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-sonar-hidden-security-risks-jupyter-notebooks/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-wiz-research-cosmosescape-taking-over-every-database-azure-cosmos-db/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/arxiv-cdn-tsunami-exploiting-http-3-http-1-1-conversion-dos-attacks/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-datadog-security-labs-before-first-prompt-code-execution-paths-projects/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/elttam-jupyter-enterprise-gateway-notebook-kubernetes-cluster-admin/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/renwa-site-dom-xss-using-cookie-injection-ai-hackers-coming-faster-than-think/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/truffle-security-securing-supply-chain-cache-vulnerability-rubygems/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/beyondtrust-how-we-got-admin-access-every-copilot-studio-agent-sandbox-earth/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/doyensec-navigating-lax-load-balancers-when-intersection-gets-you-inside/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/def-con-8-out-10-banks-belgium-hate-this-one-weird-eid-rce/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-martino-spagnuolo-forgotten-bug-how-node-js-core-design-flaw-splitting/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/searchlight-cyber-ghosts-encryption-past-salesforce-marketing-cloud-exacttarget/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/searchlight-cyber-cargowise-webtracker-keys-cargo/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-nullcathedral-roundcube-svg-feimage-remote-image-bypass/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-arkark-seccon-ctf-14-finals-author-writeups_translate/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/worty-fcsc-2026-aquarium/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-proofpoint-oauth-client-id-spoofing-why-fake-client-ids-enumeration/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hackerone-unauthenticated-rce-taskcluster-web-server-graphql-filter-where/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-oasis-security-cline-kanban-websocket-hijack/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/troopers-nested-app-authentication-undocumented-risk-conditional-access-copy/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/appsec-village-rop-web-smuggling-xss-sqli-web-shells-past-every-dictionaries/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/the-chinese-university-of-hong-kong-demystifying-security-oauth-ecosystems/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-voorivex-shaking-mcp-tree-security-deep-dive/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-voorivex-when-two-parsers-disagree-exploiting-query-string-xss/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-voorivex-uxss-samsung-browser-cve-2025-58485-sve-2025-1879/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-voorivex-my-first-rce-reverse-engineering-exe-file-help-ai/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/reco-salesforce-apex-predator-breaking-salesforce-sites/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/secure-from-scratch-api-made-me-do-it-do-bad-apis-lead-ai-generate-code/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-embrace-the-red-llm-heist-hijacking-litellm-traffic-interception-injection/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/synacktiv-kyc-bypass-age-verification-using-generative-video-models/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/aikido-security-astro-full-read-ssrf-host-header-injection/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-cyera-research-drive-agent-hijacking-one-website-visit-poisoning/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-trace37-trust-transitions-email-when-sanitizers-css-engines-disagree/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/hackerone-burp-suite-professional-browser-powered-crawl-can-write-handling/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/ieee-symposium-on-security-and-privacy-poisoned-host-large-scale-applications/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/2026-trace37-cve-2026-41238-how-prototype-pollution-turns-dompurify-xss-gadget/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/medium-iframe-sandbox-bypass-cross-origin-drag-drop-unvalidated-takeover/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/truffle-security-api-keys-leaking-png-metadata-ai-images/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/reference/aikido-security-sveltespill-cache-deception-bug-sveltekit-vercel/</loc>
    <lastmod>2026-09-13</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://webhacklist.com/security/</loc>
    <priority>0.3</priority>
  </url>
</urlset>
