Live data from Hacker News

HTTP Status Code XSS

tools.seobook.com

Post reply on HN

Print view View original

1–3 of 3 posts

HTTP Status Code XSS

Post by jagracey » Sun, Sep 28, 2014, 10:13 PM UTC

HTTP Status Code XSS
tools.seobook.com

Re: HTTP Status Code XSS

Post by jagracey » Sun, Sep 28, 2014, 10:17 PM UTC

Approximately 3/4 of the top 30 status code checking tools are all vulnerable against basic XSS. Thought I'd share this rather fun method. Checkout "netcat security.gracey.ca 1500" for details.

Re: HTTP Status Code XSS

Post by general_failure » Mon, Sep 29, 2014, 1:39 AM UTC

Always sanitize your input, people.

Post reply on HN