Guymon

XSS Rays

Das XSS-Tester Bookmarklet XSS Rays ist ein nützliches kleines Tool in der Webentwickler Werkzeugkiste.

It works as a bookmarklet and scans any links, paths or forms on the target scanning page (even cross domain). You can add vectors to it quite easily and it includes some of the most common injections I’ve found on sites over the years. I’ve tested it on IE7/IE8 and Firefox but it could work in other browsers.

Writing secure PHP applications

Keine weltbewegenden Neuigkeiten, aber da ein Update in Punkto Sicherheit nie falsch ist: Seven habits for writing secure PHP applications.

• Validate input
• Guard your file system
• Guard your database
• Guard your session data
• Guard against Cross-Site Scripting (XSS) vulnerabilities
• Verify form posts
• Protect against Cross-Site Request Forgeries (CSRF)