KNOXSS Community Edition is a FREE standalone version of KNOXSS browser add-on designed to find the main XSS (Cross-Site Scripting) cases shown here. In current version (beta 0.2.0) it can detect all XSS cases below for GET and POST requests. Just open one of the testing URLs and click on add-on's icon in your Firefox. Main advantages include HIGH SPEED and GOOD EFFICIENCY to find covered cases in regular scenarios (exact reflection of input in response). Unfortunately it's very prone to both false positive and false negative since it works by parsing the source code not by actual detection of JavaScript execution like main KNOXSS does. Here are the URLs (XSS cases) for testing: GET Method: https://brutelogic.com.br/gxss.php?a=any https://brutelogic.com.br/gxss.php?b1=any https://brutelogic.com.br/gxss.php?b2=any https://brutelogic.com.br/gxss.php?b3=any https://brutelogic.com.br/gxss.php?b4=any https://brutelogic.com.br/gxss.php?c1=any https://brutelogic.com.br/gxss.php?c2=any https://brutelogic.com.br/gxss.php?c3=any https://brutelogic.com.br/gxss.php?c4=any https://brutelogic.com.br/gxss.php?c5=any https://brutelogic.com.br/gxss.php?c6=any POST Method: http://testphp.vulnweb.com/ https://demo.testfire.net/ https://brutelogic.com.br/pxss.php Feedback is welcome @brutelogic.

開発者の返信