Reputation: 1
How to test <script>alert("XSSTest")</script>
I need to pass (alert("XSSTest")) this string in all the field to test-penetration testing. even i dont have much idea about this. Presently am doing this entering this text/script manually to each and every field of my web application. Can any one suggest me is there is any tool which can ease this task. I even heard there are many plugin for FF browser available for the same.
Upvotes: -1
Views: 3440
Answers (1)
Reputation: 451
You have many options to automate XSS testing. You can use free and commercial softwares to acheive this. I listed some popular tools below:
Commercial (there may be a trial version)
Freeware
Mozilla Firefox AddOn:
Now bear in mind that if you have the source code of the application that you want to test, you may do also static code analysis. This also depends on the technology you are using. Find below some tools for this:
Of course the lists may continue for many more other tools.
Upvotes: 2
Related Questions
- How to run only one unit test class using Gradle?
- How do I properly assert that an exception gets raised in pytest?
- How can I write a test which expects an 'Error' to be thrown in Jasmine?
- How to unit test abstract classes: extend with stubs?
- How to perform penetration testing of Set Top Box
- Replace/remap server response body while preserving most of original header fields served to browser
- XSS - Which browsers automatically escape urls in the address bar?
- What should be the approach to fix 1.Memory leakage through web server process & 2.Potential buffer overflow?
- Updated: Free tools for checking security vulnerabilities for rails app