What I learned from suffering my first and last XSS attack

Re:What I learned from suffering my first and last XSS attack by pramodliv1 on Monday February 29, 2016 @02:31AM (#11194091)

Is there a tool that tries XSS and other common attacks on a web page?

Similar to how Google Page Speed Insights and SEO tools which detect errors such as "You haven't minified your CSS", "You haven't set a title and description for your page" etc.

[ Parent | on HN ]

Re:What I learned from suffering my first and last XSS attack by sahreeg on Monday February 29, 2016 @04:55AM (#11194527)

Vulnerability scanners are usually premium (paid) products. Some offer free trials such as Qualys: https://www.qualys.com/forms/freescan/

Other famous tools are nessus, and accunetix: https://www.tenable.com/products/nessus-vulnerability-scanne..., http://www.acunetix.com/vulnerability-scanner/

These scanners are usually used by security consultants to test a complete internal network of a client.

For a full list, some of which are open source, check this link: https://www.owasp.org/index.php/Category:Vulnerability_Scann...

[ Parent | on HN ]

Re:What I learned from suffering my first and last XSS attack by pramodliv1 on Monday February 29, 2016 @07:04AM (#11194963)

Thank you!

[ Parent | on HN ]

Re:What I learned from suffering my first and last XSS attack by borski on Monday February 29, 2016 @03:37AM (#11194284)

Check out https://www.tinfoilsecurity.com. It looks for XSS, and about 60 other different types of attacks.

(edit: full disclosure, I'm one of the founders)

[ Parent | on HN ]

Re:What I learned from suffering my first and last XSS attack by pramodliv1 on Monday February 29, 2016 @07:03AM (#11194961)

Thanks, I got an error message. I'll check it out once the site is up!

[ Parent | on HN ]

Re:What I learned from suffering my first and last XSS attack by pramodliv1 on Monday February 29, 2016 @11:07AM (#11196225)

Tinfoil discovered a few errors on my site. Thank you! I wish you hired a designer though :)

[ Parent | on HN ]

Re:What I learned from suffering my first and last XSS attack by borski on Wednesday March 02, 2016 @06:52PM (#11214054)

Ha, feedback is always appreciated. What aspects did you think needed more design work?

[ Parent | on HN ]