[Owasp-leaders] Some News Regarding OWASP Xenotix XSS Exploit Project
Aaron Guzman
aaron.guzman at owasp.org
Wed Dec 17 20:17:30 UTC 2014
Thanks Ajin,
I use Xenotix from time to time. Thank you for your work.
I am a bit concerned with the mobile app version.
"Xenotix Mobile Proxy
All the scans are passed through our cloud based proxy to mitigate browser
security features that will prevent XSS from executing."
Your proxy will strip response headers (CSP, X-XSS-Protection.. etc) out
I assume? I do not see any detail whether headers or scans are logged on
your servers when they transport through your proxy.
Any details on that aspect?
Thank you
On Wed, Dec 17, 2014 at 11:58 AM, Ajin Abraham <ajin.abraham at owasp.org>
wrote:
>
> Hi all,
>
> Version 6.1 Released: http://xenotix.in
>
> A new tutorial series:
> https://www.youtube.com/playlist?list=PLX3EwmWe0cS80ls3TsNiukQD0hfZjLHnP
>
> And at last happy to release an android version of Xenotix, called Xenotix
> Mobile.
> Get it from http://m.xenotix.in
>
> Regards,
> Ajin | @ajinabraham
> http://opensecurity.in
>
> _______________________________________________
> OWASP-Leaders mailing list
> OWASP-Leaders at lists.owasp.org
> https://lists.owasp.org/mailman/listinfo/owasp-leaders
>
>
--
Aaron G
Twitter: @scriptingxss
Linkedin: http://lnkd.in/bds3MgN
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-leaders/attachments/20141217/42e1083e/attachment.html>
More information about the OWASP-Leaders
mailing list