search

DanMcInerney / xsscrapy

XSS spider - 66/66 wavsep XSS detected
1.66k stars 441 forks source link

Major changes coming #8

Closed DanMcInerney closed 10 years ago

DanMcInerney commented 10 years ago

Tested this script against wavsep, the web application vuln scanner benchmarking tool. It fails multiple XSS tests of wavsep but most of the problems all seem to lie in the logic for determining whether it's the single or double quote that's the delimiting quote. In the coming update, xsscrapy should cut the amount of requests it makes in half and have significantly better detection rates. May take a few weeks or more to accomplish.

DanMcInerney commented 10 years ago

Most of the major logic engine changes are done. Should be version 1.0 ready soon.