Mostrando entradas con la etiqueta online scanner. Mostrar todas las entradas
Mostrando entradas con la etiqueta online scanner. Mostrar todas las entradas

DOMXSS Scanner

Posted: 21/2/11 by komz in Etiquetas: , , , , ,
0

entaDOMXSS Scanner is an online tool that helps you find potential DOM based XSS security vulnerabilities. Enter a URL to scan the document and the included scripts for DOMXSS sources and sinks in the source code of Web pages and JavaScript files.

What is DOM Based XSS?
“DOM Based XSS (or as it is called in some texts, “type-0 XSS”) is an XSS attack wherein the attack payload is executed as a result of modifying the DOM “environment” in the victim’s browser used by the original client side script, so that the client side code runs in an “unexpected” manner. That is, the page itself (the HTTP response that is) does not change, but the client side code contained in the page executes differently due to the malicious modifications that have occurred in the DOM environment.”

DOMXSS Scanner is what we would like to call a cloud-based web security scanner. It can be considered as a next generation scanner not exactly in performance and report wise but in community edition web security.
Click here to know more or use DOMXSS Scanner.
Just for your convenience, we have also included a DOM based XSS Prevention Cheat Sheet from OWASP here.

fuente: pentestit.com

0

En la informacion esta el poder y por eso les dejo una lista de herramientas de seguridad, muchas de ellas gratuitas, agrupadas en diferentes categorias, desde removedores de virus, pasando por  monitorzacion de trafico de red hasta cosas mas "deep" como encriptacion o temas de vulnerabilidades.


Ø      Realtime protection
Ø      Scanners
Ø      Online-scanners
Ø      Firewalls
Ø      HIPS
Ø      System hardening-HIPS
Ø      System hardening
Ø      Browser security
Ø      IP-blocking/hardening
Ø      What's new
Ø      System monitoring
Ø      System cleaning
Ø      Data rescue
Ø      Encrypting
Ø      Backup
Ø      System rescue
Ø      Miscellaneous
Ø      Privacy
Ø      Prisoners on remand


No nos hacemos responsables por el mal uso que se le pueda dar a la herramienta/codigo/informacion ya que nuestra mision simplemente es la de compartir la informacion existente.


fuente: techsupportalert.com