mksben.l0.cm

GENERAL
META
KEYWORD DATA
BACKLINKS
HTML
LINK ANALYSIS
SERVER
IP

Mksben.l0.cm recives any estimated n/a unique visitors and n/a unique page views per day. Revenue gained from these much visits may be n/a per day from various advertising sources. The estimated worth of site is n/a.

Website Age n/a
Moz Pagerank3
Alexa Rank no-data
Country Netherlands
IP Address 142.250.179.211

META INFORMATION

Title

MKSB(en)

Description

Keywords

Content Type

utf-8

No	Meta Name	Value
1	viewport	width=1100

Top Keywords in Search

Keyword	Position	Traffic %	Keyword Cost	Traffic Cost	Results
electron discord	63	0	0	0	5500000
html discord	55	0	0	0	136000000
javascript デスクトップアプリ	81	0	0	0	5050000
svg font html	35	0	0	0	343000000
toolbar google command	31	0	0	0	14600000
sketchfab discord	23	0	0	0	1860000
chrome browser content places places xul	30	0	0	0	78
discord comhttps www google com	28	0	0	0	71
safari 文字コード	22	0	0	0	2610000
discord desk top	99	0	0	0	2050000000
is discord made with electron	68	0	0	0	4800000
script src strict dynamic	91	0	0	0	546000
bocu 1	15	0	0	0	2780000
charset euc jp	13	0	0	0	386000
iframe csp bypass	11	100	0	0	105000
iso ir 87	56	0	0	0	160000000
discord iframe	84	0	0	0	5220000
domain docmode	70	0	0	0	720000
svg font css	21	0	0	0	50500000
blocked by xss auditor	82	0	0	0	420000
jquery xss example	92	0	0	0	495000
xss poc	82	0	0	0	382000
discord electron	62	0	0	0	4150000
xss チートシート	17	0	0	0	18400
discord for desktop	80	0	0.05	0	2750000000

Top backlinks

Backlink from Page: blackhillsinfosec.com/how-to-not-get-scammed-on-discord/
Link back to url: mksben.l0.cm/2020/10/discord-desktop-rce.html
Anchor Text: a blog post
Link is Dofollow
External Links: 4
Backlinking Domain Category: Top/Business

Backlink from Page: wiki.ioin.in/url/2Mr
Link back to url: mksben.l0.cm/2015/08/cve-2015-4483.html
Anchor Text:
Link is Dofollow
External Links: 2
Backlinking Domain Category: Top/Computers

Backlink from Page: x-c3ll.github.io/posts/CSS-Injection-Primitives/
Link back to url: mksben.l0.cm/2015/10/css-based-attack-abusing-unicode-range.html
Anchor Text: CSS based Attack: Abusing unicode-range of @font-
Link is Dofollow
External Links: 4
Backlinking Domain Category: Top/Computers

Backlink from Page: soom.cz/clanky/1208--Path-relative-stylesheet-import-PRSSI
Link back to url: mksben.l0.cm/2015/10/css-based-attack-abusing-unicode-range.html
Anchor Text: http://mksben.l0.cm/2015/10/css-based-attack-abus
Link is Dofollow
External Links: 4
Backlinking Domain Category: Top/Science

Backlink from Page: comptoirsecu.fr/sechebdo/sechebdo-21-octobre-2020/
Link back to url: mksben.l0.cm/2020/10/discord-desktop-rce.html
Anchor Text: MKSB(en): Discord Desktop app RCE
Link is Dofollow
External Links: 5
Backlinking Domain Category:

Backlink from Page: hahwul.com/2016/01/06/web-hacking-xxn-attackx-xss-nightmare-r/
Link back to url: mksben.l0.cm/2015/12/xxn.html
Anchor Text: http://mksben.l0.cm/2015/12/xxn.html
Link is Dofollow
External Links: 2
Backlinking Domain Category: Top/Computers

Backlink from Page: cloud.tencent.com/developer/news/283710
Link back to url: mksben.l0.cm/2016/05/xssauditor-bypass-flash-basetag.html
Anchor Text: 3
Link is Nofollow
External Links: 6
Backlinking Domain Category:

Backlink from Page: devsaid.com/mehanizm-zashhishhayushhiy-brauzer-edge-ot-xss-atak-rabotaet-nekorrektno/
Link back to url: mksben.l0.cm/2016/05/xssauditor-bypass-flash-basetag.html
Anchor Text: 3
Link is Dofollow
External Links: 2
Backlinking Domain Category: Top/Computers

Backlink from Page: novostel.ru/2020/10/22/%d1%83%d1%8f%d0%b7%d0%b2%d0%b8%d0%bc%d0%be%d1%81%d1%82%d1%8c-%d0%b2-discord-%d0%bf%d0%be%d0%b7%d0%b2%d0%be%d0%bb%d1%8f%d0%bb%d0%b0-%d1%83%d0%b4%d0%b0%d0%bb%d0%b5%d0%bd%d0%bd%d0%be-%d0%b2%d1%8b%d0%bf/
Link back to url: mksben.l0.cm/2020/10/discord-desktop-rce.html
Anchor Text: рассказал в своем блоге
Link is Dofollow
External Links: 2
Backlinking Domain Category: СМИ/Периодика

Backlink from Page: gomyitguy.com/blog-news-updates/discord-desktop-app-is-vulnerable-to-remote-cyberattacks
Link back to url: mksben.l0.cm/2020/10/discord-desktop-rce.html
Anchor Text: blog post
Link is Dofollow
External Links: 3
Backlinking Domain Category: Top/Computers

Backlink from Page: rstforums.com/forum/topic/114630-javascript-prototype-pollution-practice-of-finding-and-exploitation/
Link back to url: mksben.l0.cm/2020/10/discord-desktop-rce.html
Anchor Text: Discord Desktop app RCE
Link is Nofollow
External Links: 4
Backlinking Domain Category: Top/Games

Backlink from Page: ibtimes.sg/security-flaws-discords-desktop-app-allowed-hackers-take-over-system-52654
Link back to url: mksben.l0.cm/2020/10/discord-desktop-rce.html
Anchor Text: blog post
Link is Nofollow
External Links: 2
Backlinking Domain Category: Top/Science

Backlink from Page: umumble.com/profile/Killer/links/page3/
Link back to url: mksben.l0.cm/2021/11/css-exfiltration-svg-font.html
Anchor Text: Data Exfiltration via CSS and SVG Font
Link is Nofollow
External Links: 2
Backlinking Domain Category: Top/Computers

Backlink from Page: helix.su/css/page/8/
Link back to url: mksben.l0.cm/2015/10/css-based-attack-abusing-unicode-range.html
Anchor Text: Демо
Link is Dofollow
External Links: 3
Backlinking Domain Category: Hi-Tech/Программы

Backlink from Page: rapid7.com/blog/post/2016/10/03/cross-site-scripting-xss-attacks/
Link back to url: mksben.l0.cm/2015/10/css-based-attack-abusing-unicode-range.html
Anchor Text: CSS Information Disclosure Attack
Link is Dofollow
External Links: 9
Backlinking Domain Category: Top/Computers

Backlink from Page: angular.love/2021/10/14/angular-electron/
Link back to url: mksben.l0.cm/2020/10/discord-desktop-rce.html
Anchor Text: aplikacja Discord
Link is Dofollow
External Links: 3
Backlinking Domain Category: Top/Arts

Backlink from Page: masatokinugawa.l0.cm/
Link back to url: mksben.l0.cm/
Anchor Text: Blog(English)
Link is Dofollow
External Links: 5
Backlinking Domain Category: Top/Science

Backlink from Page: portswigger.net/research/detecting-and-exploiting-path-relative-stylesheet-import-prssi-vulnerabilities
Link back to url: mksben.l0.cm/2015/10/css-based-attack-abusing-unicode-range.html
Anchor Text: Abusing unicode-range of @font-face
Link is Dofollow
External Links: 3
Backlinking Domain Category: Top/Arts

Backlink from Page: paper.seebug.org/162/
Link back to url: mksben.l0.cm/2016/12/xssauditor-bypass-using-paramtag.html
Anchor Text: MKSB
Link is Dofollow
External Links: 1
Backlinking Domain Category: Top/Computers

Backlink from Page: no1geekfun.com/security-researcher-combines-three-vulnerabilities-in-discord-messenger/
Link back to url: mksben.l0.cm/2020/10/discord-desktop-rce.html
Anchor Text: In a detailed blog post
Link is Dofollow
External Links: 2
Backlinking Domain Category: Top/Arts

Backlink from Page: hackdig.com/08/hack-25716.htm
Link back to url: mksben.l0.cm/2015/08/cve-2015-4483.html
Anchor Text: l0
Link is Dofollow
External Links: 3
Backlinking Domain Category:

Backlink from Page: parsiya.net/blog/2021-06-08-the-javascript-bridge-in-modern-desktop-applications/
Link back to url: mksben.l0.cm/2020/10/discord-desktop-rce.html
Anchor Text: RCE happens
Link is Dofollow
External Links: 2
Backlinking Domain Category: Top/Computers

Backlink from Page: nvd.nist.gov/vuln/detail/CVE-2016-4758
Link back to url: mksben.l0.cm/2016/09/safari-uxss-showModalDialog.html
Anchor Text: http://mksben.l0.cm/2016/09/safari-uxss-showModal
Link is Dofollow
External Links: 7
Backlinking Domain Category: Top/Computers

Backlink from Page: natp.dz/veille-detail.php?idm=22&idsm=46&id=268
Link back to url: mksben.l0.cm/2020/10/discord-desktop-rce.html
Anchor Text: détails techniques de cette typologie d&rs
Link is Dofollow
External Links: 1
Backlinking Domain Category: Top/Games

Moz Stats

Moz Backlinks Count	199
Moz Page Rank	3
Domain Authority (DA)	38
Page Authority (PA)	32

GENERAL HTML INFORMATION

Type	Status
HTML 5
Responsive Website

HTML SIZE INFORMATION

Text / Code Ratio 38.87 %

mksben.l0.cm has a website text/code ratio of 38.87 %. Search engine crawlers tend to not pick up pages with inadequate content.

IMPORTANT HTML TAGS AND COUNTS

Titles

H11
H212
H325
H40
H50
H60

No	Text
1	Mksb(en)

No	Text
1	Sunday, november 28, 2021
2	Sat****ay, october 17, 2020
3	Sunday, may 17, 2020
4	Thursday, may 24, 2018
5	Tuesday, december 27, 2016
6	Thursday, october 6, 2016
7	Sunday, september 25, 2016
8	Preconditions for attack
9	The bug
10	Developing xss attacks
11	Conclusion
12	Blog archive

No	Text
1	Data exfiltration via css + svg font
2	Discord desktop app rce
3	Why ı chose discord for the target
4	Bugs ı found
5	Missing contextısolation
6	Xss in iframe embeds
7	Navigation restriction bypa*** (cve-2020-15174)
8	ın the end (2)
9	Cve-2020-11022/cve-2020-11023: jquery 3.5.0 security fix details
10	Overview of problems
11	Pocs
12	Cve-2020-11023: root cause (poc 1,2)
13	The fix (poc 1,2)
14	Cve-2020-11022: root cause (poc 3)
15	The fix (poc 3)
16	Update it
17	Cve-2018-5175: universal csp strict-dynamic bypa*** in firefox
18	What is the "strict-dynamic"?
19	Known strict-dynamic bypa***
20	Universal strict-dynamic bypa***(cve-2018-5175)
21	ın the end of article
22	Xss auditor bypa*** using obscure <param> tag
23	Xss via referrer after anniversary update
24	Cve-2016-4758: uxss in safari's showmodaldialog

Text Styling

STRONG0
B6
EM0
I44
U0
CITE0

No	Text
1	nodeIntegration: false
2	og:video:url
3	sketchfab.com
4	<style />
5	<style ></style>
6	"data:,alert(1)"

No	Text
1	nodeIntegration (5)
2	contextIsolation (8)
3	BrowserWindow
4	child_process
5	discord_utils
6	execa (3)
7	nvidia-smi.exe
8	calc
9	frame-src
10	new-window
11	will-navigate (4)
12	sandbox
13	trusted.example.com (3)
14	A.js
15	contentaccessible=yes (2)
16	resource: (3)
17	devtools/modules/devtools/
18	jar:file:///C:/Program%20Files%20(x86)/Mozilla%20Firefox/browser/omni.ja!/chrome/devtools/modules/devtools/
19	resource://devtools/ (2)
20	resource://devtools-client-jsonview/
21	data:
22	HTMLObjectElement.cpp

LINK ANALYSIS

Total Link Count: 223

Internal Link Count : 115

No	Text	Type
1	Data Exfiltration via CSS + SVG Font	text
2	12:58 AM	text
3	3 comments:	text
4	CSP	text
5	CSS	text
6	Safari	text
7	Security	text
8	SVG	text
9	XSS	text
10	-	empty
11	Discord Desktop app RCE	text
12	8:24 AM	text
13	17 comments:	text
14	Electron	text
15	JavaScript	text
16	RCE	text
17	Security	text
18	VRP	text
19	XSS	text
20	-	empty
21	CVE-2020-11022/CVE-2020-11023: jQuery 3.5.0 Security Fix details	text
22	12:45 PM	text
23	17 comments:	text
24	JavaScript	text
25	jQuery	text
26	OSS	text
27	Security	text
28	XSS	text
29	-	empty
30	CVE-2018-5175: Universal CSP strict-dynamic bypa*** in Firefox	text
31	2:02 AM	text
32	2 comments:	text
33	CSP	text
34	Firefox	text
35	Security	text
36	XSS	text
37	-	empty
38	XSS Auditor bypa*** using obscure <param> tag	text
39	4:01 AM	text
40	25 comments:	text
41	Chrome	text
42	Flash	text
43	Security	text
44	XSS	text
45	XSSAuditor	text
46	-	empty
47	XSS via Referrer After Anniversary Update	text
48	https://l0.cm/xss_referrer_oldpoc.html?<script>alert("1")</script>	text
49	https://l0.cm/xss_referrer.swf?<script>alert(1)</script>	text
50	https://l0.cm/xss_referrer.pdf?<script>alert(1)</script>	text

External Link Count : 108

No	Text	Type
1	@kinugawamasato	text
2	CSS Injection Primitives :: DoomsDay Vault	text
3	Stealing Data in Great style – How to Use CSS to Attack Web Application. - research.securitum.com	text
4	in my j***anese blog post	text
5	https://vulnerabledoma.in/svg_font/xss.html?xss=%3Cs%3EXSS%3Cscript%3Ealert(1)%3C/script%3E	text
6	https://l0.cm/svg_font/poc.php	text
7	https://github.com/masatokinugawa/css-exfiltration-svg-font	text
8	Safari blocks all third party cookies by default	text
9	-	image
10	Email This	text
11	BlogThis!	text
12	Share to Twitter	text
13	Share to Facebook	text
14	Share to Pinterest	text
15	Discord	text
16	Bug Bounty Program	text
17	BrowserWindow API	text
18	Electron's internal JavaScript code on the renderer	text
19	https://drive.google.com/file/d/1LSsD9gzOejmQ2QipReyMXwr_M0Mg1GMH/view	text
20	I introduced	text
21	https://github.com/moxystudio/node-cross-spawn/blob/16feb534e818668594fd530b113a028c0c06bddc/lib/pa****.js#L36	text
22	https://github.com/moxystudio/node-cross-spawn/blob/16feb534e818668594fd530b113a028c0c06bddc/lib/pa****.js#L55	text
23	OGP	text
24	sketchfab.com	text
25	https://l0.cm/discord_rce_og.html	text
26	Discord's Bug Bounty Program	text
27	Sketchfab's Bug Bounty Program	text
28	Electron's security team	text
29	https://github.com/electron/electron/security/advisories/GHSA-2q4g-w47c-4674	text
30	-	image
31	Email This	text
32	BlogThis!	text
33	Share to Twitter	text
34	Share to Facebook	text
35	Share to Pinterest	text
36	https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/	text
37	https://github.com/advisories/GHSA-gxr4-xjj5-5px2	text
38	https://github.com/advisories/GHSA-jpcq-cgw6-v4j6	text
39	https://vulnerabledoma.in/jquery_htmlPrefilter_xss.html	text
40	$.htmlPrefilter()	text
41	https://github.com/jquery/jquery/commit/fb9472c7fbf9979f48ef49aff76903ac130d0959#diff-169760a97de5c86a886842060321d2c8L30-R30	text
42	https://github.com/jquery/jquery/commit/90fed4b453a5becdb7f173d9e3c1492390a1441f#diff-169760a97de5c86a886842060321d2c8L201-R198	text
43	https://github.com/jquery/jquery/blob/3.4.1/src/manip****tion/wrapMap.js#L9	text
44	https://github.com/jquery/jquery/blob/d0ce00cdfa680f1f0c38460bc51ea14079ae8b07/src/manip****tion/buildFragment.js#L39	text
45	does not allow	text
46	https://github.com/jquery/jquery/commit/966a70909019aa09632c87c0002c522fa4a1e30e#diff-51ec14165275b403bb33f28ce761cdedR25	text
47	DOMPurify	text
48	2.0.8	text
49	@PwnFunction	text
50	https://xss.pwnfunction.com/challenges/ww3/	text
51	DOMPurify's change log	text
52	@PwnFunction	text
53	-	image
54	Email This	text
55	BlogThis!	text
56	Share to Twitter	text
57	Share to Facebook	text
58	Share to Pinterest	text
59	https://www.mozilla.org/en-US/security/advisories/mfsa2018-11/#CVE-2018-5175	text
60	https://www.w3.org/TR/CSP3/#strict-dynamic-usage	text
61	it is known	text
62	https://github.com/google/security-research-pocs/blob/master/script-gadgets/bypa***es.md	text
63	web_accessible_resources	text
64	contentaccessible flag	text
65	resource: URI	text
66	https://vulnerabledoma.in/fx_csp_bypa***_strict-dynamic.html	text
67	https://www.w3.org/TR/CSP3/#extensions	text
68	Cure53 CNY XSS Challenge 2018	text
69	different version of this XSS Challenge	text
70	-	image
71	Email This	text
72	BlogThis!	text
73	Share to Twitter	text
74	Share to Facebook	text
75	Share to Pinterest	text
76	https://bugs.chromium.org/p/chromium/issues/detail?id=676992	text
77	https://vulnerabledoma.in/char_test?body=%3Cobject%20allowscriptaccess=always%3E%20%3Cparam%20name=url%20value=https://l0.cm/xss.swf%3E	text
78	https://vulnerabledoma.in/char_test?body=%3Cobject%20allowscriptaccess=always%3E%20%3Cparam%20name=code%20value=https://l0.cm/xss.swf%3E	text
79	-	image
80	Email This	text
81	BlogThis!	text
82	Share to Twitter	text
83	Share to Facebook	text
84	Share to Pinterest	text
85	https://vulnerabledoma.in/xss_referrer	text
86	submitForm() method	text
87	-	image
88	Email This	text
89	BlogThis!	text
90	Share to Twitter	text
91	Share to Facebook	text
92	Share to Pinterest	text
93	https://support.apple.com/en-us/HT207157	text
94	https://vulnerabledoma.in/safari_uxss_showModalDialog/target.html	text
95	https://vulnerabledoma.in/index.html	text
96	https://l0.cm/safari_uxss_showModalDialog/example.html	text
97	https://vulnerabledoma.in/index.html	text
98	html5sec.org #42	text
99	https://l0.cm/safari_uxss_showModalDialog/	text
100	-	image
101	-	image
102	Email This	text
103	BlogThis!	text
104	Share to Twitter	text
105	Share to Facebook	text
106	Share to Pinterest	text
107	Ollustrator	text
108	Blogger	text