Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • A arachni
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 125
    • Issues 125
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 8
    • Merge requests 8
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Package Registry
    • Infrastructure Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • Arachni - Web Application Security Scanner Framework
  • arachni
  • Issues
  • #473
Closed
Open
Issue created Sep 19, 2014 by Administrator@rootContributor

Ability to scan for "cross domain xss"

Created by: dstrozynski

This is not an issue but rather a feature request or just a question if I'm missing something.

Imagine a situation like this:

A user registers an account and he puts an xss payload into the address field. (this happens on a domain http://abcd.com/)

Next, the system administrator goes to the administration panel and displays the newly added user data. (this happens on a domain http://admin.abcd.com/dashboard/)

Assuming there is a bug in the admin dashboard our xss payload is executed on the internal admin network.

Is there any way to automate testing for scenarios like that with arachni?

Assignee
Assign to
Time tracking