Security Testing
Component type
Maintenance status
Development status
Downloads
Component created
Component changed
Security Testing is a tool for locating XSS, CSRF and SQL Injection vulnerabilities in Drupal contributed modules. This tool will scan the source code of contributed module(s) for vulnerabilities and display warnings. It also tries to exploit XSS vulnerability using SimpleTest module by injecting random data into database fields and checking if any injected data will be displayed without being sanitized first. It tries to exploit CSRF using SimpleTest by visiting each link of the contributed module and checking if any insert, update or delete query is executed.
