Skip to content

Latest commit

 

History

History
13 lines (10 loc) · 973 Bytes

README.md

File metadata and controls

13 lines (10 loc) · 973 Bytes

XSS Crosssite injection blocker

A Google chrome Extension to detect XSS cross site scripting injection based on regex patterns and block the requests.
This extension captures both GET & POST requests, checks for the possible combinations of threat vectors in the form of various HTML tags and blocks the page if data contains any threat vector.

##Usage:

  • Type chrome://extensions in a tab to bring up the extensions page.
  • check Developer mode to enable loading unpacked extensions. This will allow you to load your extension from a folder.
  • Finally, click Load unpacked extension or simply drag the Extension folder onto the page to load up the extension.
  • Test this extension on any webpage by sending GET and POST request with XSS payloads.

This is not 100% sure to block all possible threat vectors but it can work on most of the cases.
More threat vectors can be found on Owasp site.