+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: DOM XSS Scanner | online XSS scanner (/showthread.php?tid=2103167)
DOM XSS Scanner | online XSS scanner - kuksool - Jan 12, 2012
You already know about XSS and it’s risks in web applications. Here i am going to write about an online service which can help you in great ways by finding and patching DOM based XSS vulnerabilities.
What is DOM Based XSS?
DOM Based XSS (or as it is called in some texts, “type-0 XSS”) is an XSS attack wherein the attack payload is executed as a result of modifying the DOM “environment” in the victim’s browser used by the original client side script, so that the client side code runs in an “unexpected” manner. That is, the page itself (the HTTP response that is) does not change, but the client side code contained in the page executes differently due to the malicious modifications that have occurred in the DOM environment.
DOM XSS Scanner:
DOM XSS Scanner is an online tool that helps you find potential DOM based XSS security vulnerabilities. Enter a URL to scan the document and the included scripts for DOM XSS sources and sinks in the source code of Web pages and JavaScript files. More about DOM XSS Scanner.
Download from official website:
Enjoy thanks
* - KernelMode - Dec 7, 2012
That's pretty pathetic if you need to use tools to find an XSS. 😑
* - Jae - Dec 7, 2012
Or you could just google 'Online DOM XSS Scanner' and click the first result.
Spoiler (Click to View)
* - LevelUp - Dec 7, 2012
(Dec 7, 2012 02:25 PM)Lucky Star Wrote: That's pretty pathetic if you need to use tools to find an XSS. 😑
For gods sake, I was a good 4 seconds away from finishing my reply...
Anyway I agree.