Live data from Hacker News

XSStrike: XSS detection suite

github.com

11–20 of 36 posts

Re: XSStrike: XSS detection suite

#11
Just a word of caution: Running tools like this from your home IP address is a good way of getting banned from the Internet* by Akamai.

* (yes, yes, you're not banned from the Internet, but you'll be surprised by all the sites you visit that sit behind Akamai)

Some ISPs are relatively easy to get a new IP address on, others are rather difficult, so don't be dumb, use protection: a VPN.

Re: XSStrike: XSS detection suite

#13

Just a word of caution: Running tools like this from your home IP address is a good way of getting banned from the Internet* by Akamai. * (yes, yes, you're not banned from the Internet, but you'll be surprised by all the sites you visit that sit behind Akamai) Some ISPs are relatively easy to get a new IP address on, others are rather difficult, so don't be dumb, use protection: a VPN.

Don't run this kind of stuff on somebody's website without prior consent.

Re: XSStrike: XSS detection suite

#14

Just a word of caution: Running tools like this from your home IP address is a good way of getting banned from the Internet* by Akamai. * (yes, yes, you're not banned from the Internet, but you'll be surprised by all the sites you visit that sit behind Akamai) Some ISPs are relatively easy to get a new IP address on, others are rather difficult, so don't be dumb, use protection: a VPN.

Just don't run it against anything for which you do not have permission to run such tools.

Running a tool like this against your favorite websites, is a simple way of getting banned from your favorite websites.

Re: XSStrike: XSS detection suite

#15

Just a word of caution: Running tools like this from your home IP address is a good way of getting banned from the Internet* by Akamai. * (yes, yes, you're not banned from the Internet, but you'll be surprised by all the sites you visit that sit behind Akamai) Some ISPs are relatively easy to get a new IP address on, others are rather difficult, so don't be dumb, use protection: a VPN.

Couple of years back the amount of captcha I have to solve to visit a site was amazing while using the workplace network. Although the CDN I faced most problems with was CloudFlare.

Re: XSStrike: XSS detection suite

#17

Just a word of caution: Running tools like this from your home IP address is a good way of getting banned from the Internet* by Akamai. * (yes, yes, you're not banned from the Internet, but you'll be surprised by all the sites you visit that sit behind Akamai) Some ISPs are relatively easy to get a new IP address on, others are rather difficult, so don't be dumb, use protection: a VPN.

Blocking VPN ip isn't a great contribution to community. Others including you will get that ip later.

Ruin your internet for yourself, if you have to run such tools on public websites. You shouldn't anyway.

Re: XSStrike: XSS detection suite

#19
post #12

Having used XSSStrike, I must say it probably is the best public tool for hunting XSS.

Is there a private tool that only those in the know can use?

He might meant public as free/open source. Commercial XSS tools that comes to my mind is https://www.blueclosure.com/ .
Post reply on HN