摘要:XSSer (Cross site "scripter")是一款自動化滲透測試XSS漏洞的安全工具,專門用來檢測和利用不同應(yīng)用程序中存在的跨站腳本漏洞。它包含了一些選項(xiàng)用來嘗試?yán)@過特定的過濾器,并且具有特殊的代碼注入技術(shù)...
XSSer (Cross site "scripter")是一款自動化滲透測試XSS漏洞的安全工具,專門用來檢測和利用不同應(yīng)用程序中存在的跨站腳本漏洞。它包含了一些選項(xiàng)用來嘗試?yán)@過特定的過濾器,并且具有特殊的代碼注入技術(shù)。
XSSer 1.6b 主要改進(jìn)內(nèi)容:
* Added Drop Cookie option
* Added Random IP X-Forwarded-For an X-Client-IP option
* Added GSS and NTLM authentication methods
* Added Ignore proxy option
* Added TCP-NODELAY option
* Added Follow redirects option
* Added Follow redirects limiter parameter
* Added Auto-HEAD precheck system
* Added No-HEAD option
* Added Isalive option
* Added Check at url option (Blind XSS)
* Added Reverse Check parameter
* Added PHPIDS (v.0.6.5) exploit
* Added More vectors to auto-payloading
* Added HTML5 studied vectors
* Fixed Different bugs on core
* Fixed Curl handlerer options
* Fixed Dorkerers system
* Fixed Bugs on results propagation
* Fixed POST requests
聯(lián)系客服