Client-side JavaScript XSS Scanner - runs straight from your browser

["pdp (architect)" <pdp.gnucitizen () googlemail com>]

http://www.gnucitizen.org/blog/javascript-xss-scanner

This POC shows how easy is to implement XSS scanner by using only
JavaScript and a few tricks from the Web2.0 world. Similar technique
can be easily implemented into AJAX/XSS worms which will allow them to
propagate across several domains and also find new vulnerabilities on
their own.

Don't be evil. Use the POC for educational and demonstration purposes only.

-- 
pdp (architect) | petko d. petkov
http://www.gnucitizen.org

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/