HN
Hacker News
Top
New
Best
Ask
Show
Jobs
HTTP Status Code XSS | Hacker News Reader
HTTP Status Code XSS
tools.seobook.com
11 points
·
jagracey
·
·
2 comments
Open article
Save
View on HN
jagracey
(original poster)
·
Approximately 3/4 of the top 30 status code checking tools are all vulnerable against basic XSS. Thought I'd share this rather fun method. Checkout "netcat security.gracey.ca 1500" for details.
general_failure
·
Always sanitize your input, people.
Reply on news.ycombinator.com