nowfound

Work · April 20, 2013

WS

Web Security Scanner - Can Your Site Score a 100%?

http://webscanner.tk/quickscan/ Hi! I made this project over the couse of a week to help teach myself more about Django and web app development. I am studying computer security in school and web security is one of my passions. It is a tool that helps web developers ensure that they have implemented helpful security mechanisms like HTTPOnly flags, X-Frame-Options, etc. There are hundreds of tools that offer to scan websites for things like cross-site scripting, mySQL injection, etc. This tool simply looks for information that is available via one or two GET requests (the headers, protocols,…

Alternativestop 25% of April 2013

What it does

In the maker’s words, at launch

http://webscanner.tk/quickscan/ Hi! I made this project over the couse of a week to help teach myself more about Django and web app development. I am studying computer security in school and web security is one of my passions. It is a tool that helps web developers ensure that they have implemented helpful security mechanisms like HTTPOnly flags, X-Frame-Options, etc. There are hundreds of tools that offer to scan websites for things like cross-site scripting, mySQL injection, etc. This tool simply looks for information that is available via one or two GET requests (the headers, protocols, body, etc.). It does NOT attempt to fuzz or otherwise target the site (test parameters or try XSS payloads). I did this because I wanted to lower the barrier of entry. Other tools require you to upload a file to your site, add some code or prove ownership. Since this site isn't exploiting anything, none of that is necessary. It's super simple to use and is aimed towards non-security people who still want to develop secure web applications.<p>This is a quick project! There's probably a lot of errors or things that behave weirdly (I once got a score of 110% but couldn't replicate it). If you want to check out the code, here it is, free and open-source: https://github.com/matthewdfuller/Web-Security-GUI Feel free to leave feedback! I'm not looking to make any money (just learn!), so this is free and there are no ads.

Does the same job

all alternatives →

More work this month

the category →
  • Clipto MCP▲640

    Let agents source clips from terabytes of your local video

    Work · 18d ago · clipto.com

  • HyNote for Mac▲383

    Free local transcription that is 100% Private

    Work · 17d ago · hynote.ai

  • VoiceOS App Store▲330

    The app store for voice native apps that lives in your notch

    Work · 28d ago · voiceos.com

  • Scrimba Explain▲325

    Ask any question, get a video back instantly

    Work · 24d ago · scrimba.com

  • The New Calendly▲211

    Handle all of the work before, during, and after meetings

    Work · 17d ago · calendly.com

Launched alongside, April 2013

the whole month →