News for hackers. Stuff that matters.

A comment on That company whose name used to contain HTML script tags Ltd. Parent comment

Re:That company whose name used to contain HTML script tags Ltd by outsidetheparty on Wednesday October 28, 2020 @12:05PM (#24920404)
hitting mjt.xss.ht returns this:

/* THIS SUBDOMAIN HAS BEEN BANNED FROM THE XSS HUNTER SERVICE.

WE DO NOT ALLOW ABUSE OF OUR SERVICE, ALL SECURITY TESTING MUST BE AUTHORIZED.

Please use our contact form if you believe this ban was a mistake: https://xsshunter.com/contact */

[ Parent | on HN ]
Re:That company whose name used to contain HTML script tags Ltd by pushrax on Wednesday October 28, 2020 @01:16PM (#24921417)
It previously returned an XSS test payload https://pbs.twimg.com/media/ElAYZTcX0AEyFUY?format=jpg&name=...
[ Parent | on HN ]
Re:That company whose name used to contain HTML script tags Ltd by Sephr on Wednesday October 28, 2020 @03:42PM (#24923263)
The character set used looks to be specifically authorized by law[1] so this doesn't appear to be unauthorized testing.

1. https://news.ycombinator.com/item?id=24921261

[ Parent | on HN ]
Re:That company whose name used to contain HTML script tags Ltd by lopmotr on Wednesday October 28, 2020 @09:28PM (#24926120)
But not authorized by all the company register clone sites that would have triggered this. The service appears to be for testing your own site.
[ Parent | on HN ]