News for hackers. Stuff that matters.

A comment on Show HN: Check for web application security issues..

Re:Show HN: Check for web application security issues. by pors on Sunday January 08, 2012 @04:43PM (#3440600)
> Please create a "webscan.html" file with the content "scanme"

I advice you to make the contents of this file unique for each website, otherwise:

- i can check 1000s of sites for the existence of webscan.html

- enter the sites that have such a file

- see the vulnerabilities of sites I don't own.

[ Parent | on HN ]
Re:Show HN: Check for web application security issues. by swalberg on Sunday January 08, 2012 @04:52PM (#3440626)
I think you mean the file name, not the contents.
[ Parent | on HN ]
Re:Show HN: Check for web application security issues. by borski on Wednesday January 11, 2012 @03:45AM (#3450932)
Actually, filename wouldn't work because some sites just return 200 instead of a 404, against the standards.
[ Parent | on HN ]
Re:Show HN: Check for web application security issues. by pors on Sunday January 08, 2012 @04:59PM (#3440639)
At least one of them :)
[ Parent | on HN ]
Re:Show HN: Check for web application security issues. by mcorrientes on Sunday January 08, 2012 @04:48PM (#3440613)
Good point. I'll fix that. Thank you.
[ Parent | on HN ]