Hacking Swagger-UI - from XSS to account takeovers

We have reported more than 60 instances of this bug across a wide range of bug bounty programs including companies like Paypal, Atlassian, Microsoft, GitLab, Yahoo

DOM XSS due to old SwaggerUI version · Issue #681 · postmanlabs/httpbin · GitHub

How to Hack APIs in 2021 - Labs Detectify

What To Hunt As Beginner, PDF, Denial Of Service Attack

Bug Bounty Quick Wins: How to exploit XSS Issues on Swagger Instances., Jayesh Madnani posted on the topic

👩‍💻IW Weekly #43: $27200 bounty from Facebook, API Misconfigurations, E2E encryption bypass, AzureAd tenant takeover, Billion dollar vulnerability and much more…

How we made $120k bug bounty in a year with good automation

XSS em Swagger e na RedBull? #bugbounty #bugbountytips #recon #hacking #bugbountyhunter

Hacking Swagger-UI - from XSS to account takeovers

How I was able to steal users credentials via Swagger UI DOM-XSS, by Mohamed reda

Web API Pentesting - HackTricks