今天开始,系统性的学习xss测试的各项知识
自动化测试xss漏洞的工具:
1.xsser
1.1在windos系统上安装和配置xsser:
1.2在debian系统上安装和配置xsser:
1.2.1所需python和库:
- python-pycurl - Python bindings to libcurl
- python-xmlbuilder - create xml/(x)html files - Python 2.x
- python-beautifulsoup - error-tolerant HTML parser for Python
- python-geoip - Python bindings for the GeoIP IP-to-country resolver library
1.2.2在Debian上安装:
sudo apt-get install python-pycurl python-xmlbuilder python-beautifulsoup python-geoip