The Spanner logo
    • Home
    • Blog
      • Blog home
      • RSS
    • Login
    • Home
    • Blog
      • Blog home
      • RSS
    • Login
    The Spanner logo

    The Spanner
    Web security blog

    Made by Gareth Heyes
    Follow me on Twitter: @garethheyes

    Javascript for hackers!

    Hackvertor logo
    Shazzer logo
    My Github account
    Recent posts
    Introducing Feedworm: A Privacy-First RSS Reader That Lives in DevToolsSpeedy RSVP extensionAutoVaderHackvertor history and tag finderShadow Repeater v1.2.3 releaseBurp Hackvertor v2.1.24 releaseHacking roomsXSSing TypeErrors in SafarivalueOf: Another way to get thisMaking the Unexploitable Exploitable with X-Mixed-Replace on FirefoxThe curious case of the evt parameterCSS-Only Tic Tac Toe ChallengeRewriting relative urls with the base tag in SafariBypassing DOMPurify with mXSSNew IE mutation vectorHow I smashed MentalJSMentalJS DOM bypassAnother XSS auditor bypassXSS Auditor bypassBypassing the IE XSS filterUnbreakable filterMentalJS bypassesmXSSJava SerializationBypassing the XSS filter using function reassignmentRPOSandboxed jQueryX-Domain scroll detection on IE using focusEpic fail IEnew operatorDecoding complex non-alphanumeric JavaScriptHacking FirefoxDOM ClobberingBypassing XSS AuditorThe evolution of codeNon-Alpha PHP in 6-7 charsetTweetable PHP-Non AlphaMentalJS for PHPOpera x domain with video tutorialSandboxing and parsing jQuery in 100ms

    Astalanumerator update

    By Gareth Heyes (@hackvertor)

    Published 16 years 2 months ago • Last updated March 22, 2025 • ⏱️ < 1 min read

    ← Back to articles

    I wanted a sexy object enumerator. There wasn't any. So I developed the terminator of enumerators "astalanumerator". I have since integrated it into Hackvertor because that where I seem to put everything nowadays. Anyway you can use it by visiting:-

    1. http://hackvertor.co.uk/public
    2. Type window into the output
    3. Click Inspect.

    Yeah damn sexy eh? It creates a tree menu of all available properties of a object by checking a big list of JavaScript properties I've collected. I use the MS Enumerator object too thanks to Manuel Caballero as I completely forgot about it. You rock!

    The recent changes include a escaping bug because I do a crazy hack to pass the objects with modifying the existing js because I'm lazy =) so I have to double encode stuff. Added a colour code for object, functions etc changed to a fixed width font and created a nice preview of the code. Thanks to Adam Bliss for the cool suggestions.

    ← Back to articles