HTTP Status Code XSS | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

		HTTP Status Code XSS (seobook.com)
		11 points by jagracey on Sept 28, 2014 \| hide \| past \| favorite \| 2 comments

jagracey on Sept 28, 2014 | [–]

Approximately 3/4 of the top 30 status code checking tools are all vulnerable against basic XSS. Thought I'd share this rather fun method. Checkout "netcat security.gracey.ca 1500" for details.

general_failure on Sept 29, 2014 | [–]

Always sanitize your input, people.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact