Nmap: Network Exploration and Security Auditing Cookbook - Second Edition

How it works...

The script http-unsafe-output-escaping was written by Martin Holst Swende, and it spiders a web server to detect the possible problems with the way web applications return output based on user input. The script inserts the following payload into all the parameters and finds the string:

ghz%3Ehzx%22zxc%27xcv  

This payload is designed to detect the characters that could cause XSS vulnerabilities. Manual verification is required to confirm any results reported by this script.

I wrote the script http-phpself-xss to detect the XSS vulnerabilities caused by the lack of sanitation of the $_SERVER["PHP_SELF"'] variable. The script will crawl a web server to find all of the files with a .php extension and append the following payload ...