Cross Site Scripting

Scrubbr is a BSD-licensed database scanning tool that checks numerous database technologies for the presence of possible stored cross-site scripting attacks. The tool was partially inspired by "Scrawlr", a trimmed-down version of HP's WebInspect which was released for free after the so-called... Platforms: Mac

Just when developers are starting to run in circles over Cross Site Scripting, the 'sleeping giant' awakes for yet another web-catastrophe. Cross-Site Request Forgery (CSRF) is an attack whereby the victim is tricked into loading information from or submitting information to a web application for... Platforms: Mac

A bundle of 3 products in one pack, enhancing and complimenting the default SharePoint lookup column function at lesser cost! Designed to fully complement each other, these three enhancements offer a suite of features that dramatically leverage your SharePoint lookup functionality. Quickly... Platforms: Windows

The JASPA DOM API is a full abstraction layer for cross-browser scripting. It is written in a strongly-typed language modelled on AS3, and the JASPA compiler converts it into regular javascript. Platforms: PHP

Raxan is a framework that is designed to accelerate PHP/Ajax web development by making it easier for developers to build and deploy rich web applications.Key Features of The Raxan Framework:- Template binder that binds data from a database query result set returned by PDO or from arrays to Web... Platforms: PHP

Ch is an embeddable C/C++ interpreter for cross-platform scripting, shell programming, 2D/3D plotting, numerical computing, and embedded scripting. C/Ch/C++ allow users to use one language, anywhere and everywhere, for any programming tasks. Ch is the solution for: Embedded Scripting; Enterprise;... Platforms: Windows, *nix

Enterprise Capacity Solution provides a cross-site collection navigation and permission inheritance, allowing you to transparently split your document management system into multiple content databases for optimum performance and disaster recovery. FEATURES: · Create site in a new site... Platforms: Windows

Chatty :) is a very nice script that lets you create a simple but very-good looking chat in a few minutes.Distributed under GPL and written entirely in PHP, it is highly customizable and fully open to modifications. Now works properly also with non-western languages.It requires MySQL as a backend... Platforms: PHP

Chatty :) is a very nice script that lets you create a simple but very-good looking chat in a few minutes.Distributed under GPL and written entirely in PHP, it is highly customizable and fully open to modifications. Now works properly also with non-western languages.It requires MySQL as a backend... Platforms: PHP

Solar is a web application framework for PHP 5. It is fully name-spaced. Enterprise application design patterns were used in this PHP framework with built-in support for localization and configuration at all levels. It is the brainchild of Paul M. Jones who winkingly calls himself the "Benevolent... Platforms: PHP

dotDefender Monitor for Apache is the only way to know who is attacking your web site in real time. Residing on the server as webserver plug-in, dotDefender can be installed and implemented in minutes without influence on traffic or network architecture. dotDefender Monitor provides plug-and-play... Platforms: *nix

RequestPolicy is an extension for Mozilla browsers that improves the privacy and security of your browsing by giving you control over when cross-site requests are allowed by webpages you visit. It is the first comprehensive client-side protection against CSRF attacks and the first tool to enable... Platforms: *nix

CGIWrap 4.1 update protects against a cross-site scripting vulnerability in the error page handling due to how some browsers behave when a charset is not specified. CGIWrap now sets a default charset and allows overriding it during the configure process. Platforms: *nix

kses is an HTML/XHTML filter written in PHP. It removes all unwanted HTML elements and attributes, and it also does several checks on attribute values. kses can be used to avoid Cross-Site Scripting (XSS). NOTE: I don't have time for kses right now.. Platforms: *nix

* W3C Standards Compliant - XHTML strict / CSS interface, fully customizable skinned front end * Product options and versions * Multiple language capability * Multiple currencies with feed lookup to update exchange rates, format of currency display can be customzied for each currency... Platforms: Windows

Maui is a automated next-generation web application vulnerability scanner. Able to quickly scan and analyze large complex web sites/applications, Maui identifies application vulnerabilities ( e.g. Cross Site Scripting (XSS), SQL injection, Code Inclusion etc.. ) as well as site exposure risk,... Platforms: Windows

blogBuddies provides an RSS and Atom aggregator that emulates the LiveJournal Friends page. blogBuddies gathers RSS and Atom feeds into a layout similar to the LiveJournal Friends page. It is optimized for blogs, and works with Blogger, LiveJournal, DeadJournal, GreatestJournal, Xanga, RSS, and... Platforms: *nix

XSS Shell script is a powerful XSS backdoor. XSS Shell allows interactively getting control over a Cross-site Scripting (XSS) vulnerability in a web application. It demonstrates the real power and damage of Cross-site Scripting attacks. Whats New in This Release: Regenerating Pages - This... Platforms: *nix

ipcalc project takes an IP address and netmask and calculates the resulting broadcast, network, Cisco wildcard mask, and host range. By giving a second netmask, you can design subnets and supernets. It is also intended to be a teaching tool and presents the subnetting results as... Platforms: *nix

HTML::Detoxifier is a practical module to strip harmful HTML. SYNOPSIS use HTML::Detoxifier qw ; my $clean_html = detoxify $html; my $cleaner_html = detoxify($html, disallow => [qw(dynamic images document)]); my $stripped_html = detoxify($html, disallow => [qw(everything)]);... Platforms: *nix