Open andresriancho opened 10 years ago
The idea is that tpjs would produce a list of possible domxss candidate, and then the fuzzer (domxss.js) will verify them one by one using the headless phantomjs again. I think this has already been implemented in domxss.js. @neraliu for more details...
the idea of zero false positive has 2 problems needed to be solved.
anyway, if the web application has setup a test case already, the domain knowledge is already there, so the script for tainted analysis and fuzzing input are already ready.
do u know is there any testbed or testing url out there? i wanna to add those into my functional test
Maybe this one? https://github.com/dmitris/domxsstest
thanks, let me check
Some guys from SAP did some research and scanned thousands of sites. One of the coolest things from their research is that they claim to have "zero false positives". I was wondering if this would be possible using tpjs?