Re: XSS online tester

[Matthieu <ermelir () ifrance com>]

Sandeep Shetty wrote:
> Hey,
>
> Matthieu wrote:
> > I'll would like to know if you know some interesseting urls which 
> > test online XSS vulnerabilities
> > I've searched on google, but I can't found some online free scanner.
> > best regards
>
> Was at a presentation once where Rasmus Lerdorf (PHP creator) showed a 
> tool that he had developed internally at Yahoo in order to detect 
> security holes in web apps. He was going to open source it but 
> realized that a majority of the sites he tested using it had 
> vulnerabilities that could be exploited. So he decided to not give it 
> away since the tool makes it very easy to detect potential XSS 
> exploits to the wrong people. However, you can get in touch with him 
> and he will scan your site for you.
>
> Here is someone else talking about the same tool.
> http://b2evolution.net/news/2005/11/13/b2evolution_passing_the_scanmus_test 
>
>
>
> Sandeep Shetty
Hey,

well :)
I was at this php forum, and the Rasmus xss scanner bring me this need :)
but yahoo protect and restricted all their developpements taking about 
security.
I'll contact rasmus, but at the latests news, he doesn't wants to put 
it's xss scanner in public domain.
it's scanner is based upon the simpletest http client librairy, and I  
know that  it's not so complicated to develop another instance, but if 
you have any others informations about a similar scanner, I'll be 
greating you
thanks for you note, and please accept my apologies for my poor english :)
best regards

Matthieu


-------------------------------------------------------------------------
This List Sponsored by: Watchfire

Watchfire's AppScan is the industry's first and leading web application 
security testing suite, and the only solution to provide comprehensive 
remediation tasks at every level of the application. See for yourself. 
Download AppScan 6.0 today.

https://www.watchfire.com/securearea/appscansix.aspx?id=701300000003Ssh
--------------------------------------------------------------------------