Large-Scale Detection of DOM-Based XSS Based on Publisher and Subscriber Model

摘要: Cross-site scripting (also referred to as XSS) is a vulnerability that allows an attacker send malicious code (usually in the form of JavaScript) another user. XSS one top 10 vulnerabilities on Web application. While traditional cross-site exploits server-side codes, DOM-based type which affects script being executed clients browser. are much harder be detected than classic because they reside codes from sites. An automated scanner needs able execute without errors and monitor execution this detect such vulnerabilities. In paper, we introduce distributed scanning tool for crawling modern applications large scale detecting, validating DOMbased Very few scanners can really accomplish this.