XSS scan testing for any website

Use-case :

How to perform online - Website Vulnerability Scanner Report
Solution :

1. Go to this URL: https://pentest-tools.com/home
2. Input the website URL https://www.test.com/ under the  tools-->webapplication scanning--> XSS scan
3. Click on scan , it will generate the report and it will have various scanning parameters.

This tool focus on below Areas :

Summary

Overall risk level:

Info

Risk ratings:

High:	0
Medium:	0
Low:	0
Info:	2

Scan information:

Start time:	2019-04-01 04:07:56
Finish time:	2019-04-01 04:09:30
Scan duration:	1 min, 34 sec
Tests performed:	2/2
Scan status:	Finished

Findings

 Light spider results: 0 dynamic URLs of total 24 URLs crawled

 No Cross-Site Scripting vulnerabilities found.

Scan coverage information

List of tests performed (2/2)

•  Spidering target
•  Scanning for XSS vulnerabilities

BitBucket and SourceTree - CICD tools

Use case- Sourcetree tool for GIT GUI

Solution : Use the Sourcetree GUI tool for GIT/Mercurial for local and remote repo management

Step 1: Create a Git repository

Step 2: Copy your repository and add files

Step 3: Pull changes from your repository

Step 4: Use Sourcetree branches to merge an update

https://www.sourcetreeapp.com/?utm_source=internal&utm_medium=link&utm_campaign=clone_repo_win

Online Security Scan tool for any website

Use-case :

How to perform online - Website Vulnerability Scanner Report
Solution :

1. Go to this URL: https://pentest-tools.com/home
2. Input the website URL https://www.test.com/ under the  webserver scan tab
3. Click on scan , it will generate the report and it will have various scanning parameters.

This tool focus on below Areas :

Testing areas	Light scan	Full scan
Website fingerprinting
Version-based vulnerability detection
Common configuration issues
SQL injection
Cross-Site Scripting
Remote command execution
Discover sensitive files

Summary of sample scan report

Overall risk level:

Medium

Risk ratings:

High:	0
Medium:	1
Low:	3
Info:	6

Scan information:

Start time:	2019-03-29 08:03:21
Finish time:	2019-03-29 08:03:28
Scan duration:	7 sec
Tests performed:	10/10
Scan status:	Finished

Scan coverage information

List of tests performed (10/10)

1.         Fingerprinting the server software and technology...
2.  Checking for vulnerabilities of server-side software...
3.  Analyzing the security of HTTP cookies...
4.  Analyzing HTTP security headers...
5.  Checking for secure communication...
6.  Checking robots.txt file...
7.  Checking client access policies...
8.  Checking for directory listing (quick scan)...
9.  Checking for password auto-complete (quick scan)...
10.  Checking for clear-text submission of passwords (quick scan)...
11.        Server software and technology found

Software / Version	Category
Apache	Web Servers
Adobe Experience Manager	CMS
ZURB Foundation	Web Frameworks
Google Maps	Maps
Google Tag Manager	Tag Managers
jQuery	JavaScript Frameworks

Insecure HTTP cookies

Cookie Name	Flags missing
AWSELB	Secure, HttpOnly

  Details

Risk description:
Since the Secure flag is not set on the cookie, the browser will send it over an unencrypted channel (plain HTTP) if such a request is made. Thus, the risk exists that an attacker will intercept the clear-text communication between the browser and the server and he will steal the cookie of the user. If this is a session cookie, the attacker could gain unauthorized access to the victim's web session.

Lack of the HttpOnly flag permits the browser to access the cookie from client-side scripts (ex. JavaScript, VBScript, etc). This can be exploited by an attacker in conjuction with a Cross-Site Scripting (XSS) attack in order to steal the affected cookie. If this is a session cookie, the attacker could gain unauthorized access to the victim's web session. 

Recommendation:
We recommend reconfiguring the web server in order to set the flag(s) Secure, HttpOnly to all sensitive cookies. 

More information about this issue:
https://blog.dareboost.com/en/2016/12/secure-cookies-secure-httponly-flags/.

4. That's all!