Exploit Me: A Firefox plugin for security audits
Websites and web applications’ security has become extremely important, especially after the recent hacking attacks. Therefore users should be aware of security issues and take appropriate action. Security becomes more critical for websites belonging to companies and organizations where the negative impact may be even greater.
Firefox add-ons can run an initial check on your website or web application to identify any security holes in order to avoid successful hacking attacks.
These add-ons help you improve security by using penetration testing techniques. Below you can see a short description of these Firefox add-ons:
1. Exploit-ME
Exploit-ME is a set of security tools provided by Firefox and was first shown at the security conference SecTor in Toronto. Exploit-ME is easy to use and you can check any website for vulnerabilities that may be exploitable by an attacker.
2. XSS-ME
ΤXSS-ME is part of Exploit-ME and identifies Cross-Site Scripting (XSS), which are well known to cause serious damage to a website. You can download it here: https://addons.mozilla.org/en-US/firefox/addon/xss-me/.
3. SQL Inject ME
SQL Injection vulnerabilities can cause serious damage to web applications. A malicious user can possibly have access to personal records, erase them, or even access the server. Download it here (https://addons.mozilla.org/en-US/firefox/addon/sql-inject-me/) to run a security test on your website.
4. Access ME
Access vulnerabilities may allow an attacker to access data without being authorized. Access-Me is a Firefox extension which performs tests in order to find vulnerabilities that allow unauthorized access. Download it here.
Such tools can be useful to a certain point, after which you should be directed to security specialist.
Konstantinos Vavousis
Trust-IT Security Intelligence