http-jsonp-detection

Vinamra Bhatia <[email protected]>
Newsgroups gmane.comp.security.nmap.devel
Message-ID <CAP+gV2zexTYB06kwxm1ktnfsCnAZ8rrFJdvTOaj+KFJhSa9aZg@mail.gmail.com> 
Hello everyone.

My mentor and I came across this article recently and thought of making a
script to detect JSONP endpoints. I would appreciate some help in testing
the script and would love to get some feedback.

Link to the article :
https://securitycafe.ro/2017/01/18/practical-jsonp-injection/

Link to the PR for the script : https://github.com/nmap/nmap/pull/937/files

Thanks all
Vinamra

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.