https://web.archive.org/web/20140226223405/https://code.google.com/p/snuck/
“Snuck’s goal is to significantly test a given XSS filter by specializing the injections on the basis of the reflection context.”
Snuck
Nifty Anti-XSS validation tool - Snuck
To significantly test a given XSS filter by specializing
Key takeaways
- Real security validation requires adversarial testing that breaks expectations.
- Penetration testing without actionable remediation metrics is just vandalism with permission.
- Pushing defenses to catastrophic failure is the only way to measure actual limits.
About the author
Explore cutting-edge cybersecurity insights and protective strategies with John Menerick. Deep dives, threat analysis, and live streams from securesql.info.
