Show HN: Check for web application security issues. • Hacker News Board

Re: Show HN: Check for web application security issues.

#11

Post by pors » Sun, Jan 08, 2012, 9:59 PM UTC

swalberg wrote: post #8

pors wrote: post #2

> Please create a "webscan.html" file with the content "scanme" I advice you to make the contents of this file unique for each website, otherwise: - i can check 1000s of sites for the existence of webscan.html - enter the sites that have such a file - see the vulnerabilities of sites I don't own.

I think you mean the file name, not the contents.

At least one of them :)

Re: Show HN: Check for web application security issues.

#12

Post by xd » Sun, Jan 08, 2012, 9:59 PM UTC

I'm attempting to scan a site that is accessed via https but it seems to default to http.

Re: Show HN: Check for web application security issues.

#13

Post by billpatrianakos » Sun, Jan 08, 2012, 10:06 PM UTC

I wasn't able to try yet because of the required file but it looks cool so far. So far I'd suggest letting people know they need to add the webcam file first. Or if that's already there make it more prominent as its not really obvious. I'm checking it out on my iPad, maybe the desktop version makes that point clearer.

Re: Show HN: Check for web application security issues.

#14

Post by vineetdhanawat » Sun, Jan 08, 2012, 10:13 PM UTC

Nothing! Just a blank page.

Re: Show HN: Check for web application security issues.

#15

Post by aninimus » Sun, Jan 08, 2012, 10:15 PM UTC

You should update "Log" tab with "Scan Queued ETA: X" and/or "Scan Started". How long should it take to start scanning?

Re: Show HN: Check for web application security issues.

#16

Post by borski » Sun, Jan 08, 2012, 10:16 PM UTC

Happy to see more people who care about security. We run a seemingly similar service, although I can't seem to get this one working. I'd definitely check out other ways of verifying the domain though, since this leaves all your customers open to the Google Hacking of searching for webscan.html for sites a hacker can toss through your system.

http://www.tinfoilsecurity.com