XSSS跨站腳本漏洞掃描工具
XSSS是由Sven開發(fā)的跨站腳本漏洞掃描工具。
XSSS的主要特點:
* Crawl website
* Detect forms and URLs with parameters
* Fill in forms, alter parameters to include control characters
* Scan web server response for our input
XSSS的主要功能:
* Code in web pages
* JavaScript aka JScript, ECMAScript
* VBScript
* Exploits for browser security hole:
* Buffer overruns,
* Java sandbox holes,
* ActiveX components marked as “safe”.
評論
圖片
表情
