RE: Favorite tools for automating XSS testing

2012-05-24 Thread Ziots, Edward
...@gmail.com] Sent: Thursday, May 24, 2012 8:54 AM To: NT System Admin Issues Subject: Re: Favorite tools for automating XSS testing Thanks, Z Yeah, I've noticed that automation only gets you but so far with XSS and CSRF discovery... Oh well, something to do. :) Thanks again for the li

RE: Favorite tools for automating XSS testing

2012-05-24 Thread Ziots, Edward
These aren't exactly Automated, as with any XSS testing it's a bit more manual than automated IMHO. Especially if you want to truly show the evilness of what XSS vulnerabilities can do. Backtrack Penetration Platform ( W3AF), other tools Burp-Suite Pro (One of my favorites) WebScarab Fiddl