Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Web-App-Sec
[Top] [All Lists]

Re: XSS online tester

Subject: Re: XSS online tester
Date: Wed, 11 Jan 2006 20:27:55 +0530

Hey,

Matthieu wrote:
I'll would like to know if you know some interesseting urls which test online XSS vulnerabilities
I've searched on google, but I can't found some online free scanner.
best regards

Was at a presentation once where Rasmus Lerdorf (PHP creator) showed a tool that he had developed internally at Yahoo in order to detect security holes in web apps. He was going to open source it but realized that a majority of the sites he tested using it had vulnerabilities that could be exploited. So he decided to not give it away since the tool makes it very easy to detect potential XSS exploits to the wrong people. However, you can get in touch with him and he will scan your site for you.


Here is someone else talking about the same tool.
http://b2evolution.net/news/2005/11/13/b2evolution_passing_the_scanmus_test


Sandeep Shetty


------------------------------------------------------------------------- This List Sponsored by: Watchfire

Watchfire's AppScan is the industry's first and leading web application security testing suite, and the only solution to provide comprehensive remediation tasks at every level of the application. See for yourself. Download AppScan 6.0 today.

https://www.watchfire.com/securearea/appscansix.aspx?id=701300000003Ssh
--------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>