Re: Cross Site Scripting Vulnerabilities - XSS

From: Chad Loder (cloderat_private)
Date: Tue Aug 06 2002 - 08:02:08 PDT

Next message: Alex Lambert: "Re: Cross Site Scripting Vulnerabilities - XSS [was: Fw: OWASP Update]"

Previous message: Moser Max: "Requesting comments for a new wireless software project"
In reply to: Jason binger: "Cross Site Scripting Vulnerabilities - XSS"
Next in thread: Bill Pennington: "Re: Cross Site Scripting Vulnerabilities - XSS"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi Jason,

I'm not sure if you're interested in commercial tools
or not, but Rapid 7's vulnerability scanner NeXpose
will spider an entire website and test each field of
each form it encounters for vulnerability to cross
site scripting.

You can download an eval copy from www.rapid7.com.

Yours,
	Chad Loder
	Rapid 7, Inc.

* Jason binger <cisspstudyat_private> [020806 07:35]:
> Has anyone on the list done much with testing for XSS
> vulnerabilities?
> 
> Has anyone written a simple work program to test for
> these vulnerabilities that they are happy to
> distribute so others can do basic testing for these
> vulnerabilities?
> 
> There a few papers out on this topic, but none that I
> hve seen that really focus on the testing side of
> things.
> 
> Thanks
> 
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Health - Feel better, live better
> http://health.yahoo.com
> 
> ----------------------------------------------------------------------------
> This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
> Service. For more information on SecurityFocus' SIA service which
> automatically alerts you to the latest security vulnerabilities please see:
> https://alerts.securityfocus.com/
> 

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/

Next message: Alex Lambert: "Re: Cross Site Scripting Vulnerabilities - XSS [was: Fw: OWASP Update]"
Previous message: Moser Max: "Requesting comments for a new wireless software project"
In reply to: Jason binger: "Cross Site Scripting Vulnerabilities - XSS"
Next in thread: Bill Pennington: "Re: Cross Site Scripting Vulnerabilities - XSS"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Aug 06 2002 - 10:50:00 PDT