Hi everyone! I’m looking for a method or a specific tool that allows me to pause the debugger every time during the execution a variable with a given value is used. Note that I don’t have the name of the variable or variables themselfs but only the content. I think that such tool would be very useful while testing for XSS or general input sanitization.
Use case: Let’s suppose we see a value returned from the server reflected somewhere in the site and we notice that the input is somehow sanitized. We would like to know where the exact sanitization happens even if the code is obfuscated and/or the used libraries are not really stated somewhere.
Does some tool like this exist? Also if not, is there any other good method to archieve the same thing? Thank youu all
submitted by /u/nopainXX
[link] [comments]