site XSS check

Question

XSS

Hello!

Tell me how you can check your sites for XSS vulnerabilities?

For example, post something in the form to make something happen.

Answer 1

Hire a pentester/hacker with experience to manually check. For greater efficiency, you can provide access to the source code.
Of course, there are automated tools, such as Acunetix Web Vulnerability Scanner ( available in Varese ), but their effectiveness in non-banal cases is rather doubtful.

Answer 2

ha.ckers.org/xss.html

Answer 3

Usually they check with this
<script>alert('aa');</script>
If there are a lot of forms on the site, then it's better to use a program for finding vulnerabilities. One of the most advanced is Acunetix Web Security Scanner, you can find it on torrents.

Answer 4

Hey!
The best way to check a site for XSS is to check the source code.
The main reason for the appearance of XSS is the lack of filtering user input on (&, <, >, ", ')
Most modern ORMs, templating engines in languages, perform user data escaping, which should protect against XSS. Unfortunately, developers often turn off these checks manually.
More details how to protect your code from XSS: https://www.owasp.org/index.php/XSS_(Cross_Site_Sc...
How to bypass filters and implement XSS: https://www.owasp.org/index.php/ XSS_Filter_Evasion...
By the way, I'm one of the developers of the vulnerability scanner, including XSS - https://metascan.ru
You can try the scanner or just ask our guys. [email protected]

Answer 5

Thanks to all!

Answer 6