REPORT

Risk Level	Number of Alerts
High	0
Medium	5
Low	5
Informational	4

Name	Risk Level	Number of Instances
Absence of Anti-CSRF Tokens	Medium	2
Content Security Policy (CSP) Header Not Set	Medium	4
Cross-Domain Misconfiguration	Medium	2
Missing Anti-clickjacking Header	Medium	2
Vulnerable JS Library	Medium	1
Cookie No HttpOnly Flag	Low	1
Cookie without SameSite Attribute	Low	1
Cross-Domain JavaScript Source File Inclusion	Low	8
Server Leaks Version Information via "Server" HTTP Response Header Field	Low	13
X-Content-Type-Options Header Missing	Low	9
Cookie Poisoning	Informational	3
Information Disclosure - Suspicious Comments	Informational	5
Modern Web Application	Informational	2
User Agent Fuzzer	Informational	100

Name	Rule Type	Threshold	Strength
Directory Browsing	Active	MEDIUM	MEDIUM
CRLF Injection	Active	MEDIUM	MEDIUM
Path Traversal	Active	MEDIUM	MEDIUM
Remote File Inclusion	Active	MEDIUM	MEDIUM
Parameter Tampering	Active	MEDIUM	MEDIUM
Server Side Include	Active	MEDIUM	MEDIUM
GET for POST	Active	MEDIUM	MEDIUM
Cross Site Scripting (Reflected)	Active	MEDIUM	MEDIUM
Cross Site Scripting (Persistent)	Active	MEDIUM	MEDIUM
Script Active Scan Rules	Active	MEDIUM	MEDIUM
Cross Site Scripting (Persistent) - Prime	Active	MEDIUM	MEDIUM
Cross Site Scripting (Persistent) - Spider	Active	MEDIUM	MEDIUM
SQL Injection	Active	MEDIUM	MEDIUM
SQL Injection - MySQL	Active	MEDIUM	MEDIUM
SQL Injection - Hypersonic SQL	Active	MEDIUM	MEDIUM
SQL Injection - Oracle	Active	MEDIUM	MEDIUM
SQL Injection - PostgreSQL	Active	MEDIUM	MEDIUM
SQL Injection - SQLite	Active	MEDIUM	MEDIUM
Cross Site Scripting (DOM Based)	Active	MEDIUM	MEDIUM
SQL Injection - MsSQL	Active	MEDIUM	MEDIUM
ELMAH Information Leak	Active	MEDIUM	MEDIUM
Trace.axd Information Leak	Active	MEDIUM	MEDIUM
XSLT Injection	Active	MEDIUM	MEDIUM
.htaccess Information Leak	Active	MEDIUM	MEDIUM
.env Information Leak	Active	MEDIUM	MEDIUM
Server Side Code Injection	Active	MEDIUM	MEDIUM
Hidden File Finder	Active	MEDIUM	MEDIUM
Remote OS Command Injection	Active	MEDIUM	MEDIUM
XML External Entity Attack	Active	MEDIUM	MEDIUM
Generic Padding Oracle	Active	MEDIUM	MEDIUM
SOAP Action Spoofing	Active	MEDIUM	MEDIUM
SOAP XML Injection	Active	MEDIUM	MEDIUM
Heartbleed OpenSSL Vulnerability	Active	MEDIUM	MEDIUM
Buffer Overflow	Active	MEDIUM	MEDIUM
Source Code Disclosure - CVE-2012-1823	Active	MEDIUM	MEDIUM
Format String Error	Active	MEDIUM	MEDIUM
Remote Code Execution - CVE-2012-1823	Active	MEDIUM	MEDIUM
Cloud Metadata Potentially Exposed	Active	MEDIUM	MEDIUM
External Redirect	Active	MEDIUM	MEDIUM
Source Code Disclosure - /WEB-INF folder	Active	MEDIUM	MEDIUM
Private IP Disclosure	Passive	MEDIUM	-
Session ID in URL Rewrite	Passive	MEDIUM	-
Insecure JSF ViewState	Passive	MEDIUM	-
Charset Mismatch	Passive	MEDIUM	-
Cookie Without Secure Flag	Passive	MEDIUM	-
Re-examine Cache-control Directives	Passive	MEDIUM	-
Content-Type Header Missing	Passive	MEDIUM	-
Application Error Disclosure	Passive	MEDIUM	-
Information Disclosure - Debug Error Messages	Passive	MEDIUM	-
Information Disclosure - Sensitive Information in URL	Passive	MEDIUM	-
Information Disclosure - Sensitive Information in HTTP Referrer Header	Passive	MEDIUM	-
Open Redirect	Passive	MEDIUM	-
User Controllable Charset	Passive	MEDIUM	-
User Controllable HTML Element Attribute (Potential XSS)	Passive	MEDIUM	-
WSDL File Detection	Passive	MEDIUM	-
Loosely Scoped Cookie	Passive	MEDIUM	-
Viewstate	Passive	MEDIUM	-
Directory Browsing	Passive	MEDIUM	-
Heartbleed OpenSSL Vulnerability (Indicative)	Passive	MEDIUM	-
Strict-Transport-Security Header	Passive	MEDIUM	-
Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s)	Passive	MEDIUM	-
X-Backend-Server Header Information Leak	Passive	MEDIUM	-
Secure Pages Include Mixed Content	Passive	MEDIUM	-
HTTP to HTTPS Insecure Transition in Form Post	Passive	MEDIUM	-
HTTPS to HTTP Insecure Transition in Form Post	Passive	MEDIUM	-
User Controllable JavaScript Event (XSS)	Passive	MEDIUM	-
Big Redirect Detected (Potential Sensitive Information Leak)	Passive	MEDIUM	-
Retrieved from Cache	Passive	MEDIUM	-
X-ChromeLogger-Data (XCOLD) Header Information Leak	Passive	MEDIUM	-
CSP	Passive	MEDIUM	-
X-Debug-Token Information Leak	Passive	MEDIUM	-
Username Hash Found	Passive	MEDIUM	-
X-AspNet-Version Response Header	Passive	MEDIUM	-
PII Disclosure	Passive	MEDIUM	-
Script Passive Scan Rules	Passive	MEDIUM	-
Stats Passive Scan Rule	Passive	MEDIUM	-
Timestamp Disclosure	Passive	MEDIUM	-
Hash Disclosure	Passive	MEDIUM	-
Weak Authentication Method	Passive	MEDIUM	-
Reverse Tabnabbing	Passive	MEDIUM	-

Sites

http://testhtml5.vulnweb.com

HTTP Response Code	Number of Responses
403 Forbidden	163
404 Not Found	192
405 Method Not Allowed	24
200 OK	577
301 Moved Permanently	234
302 Found	258
500 Internal Server Error	3

No Authentication Statistics Found

Parameter Name	Type	Flags	Times Used	# Values

Alert Detail

Medium	Absence of Anti-CSRF Tokens
Description	No Anti-CSRF tokens were found in a HTML submission form. A cross-site request forgery is an attack that involves forcing a victim to send an HTTP request to a target destination without their knowledge or intent in order to perform an action as the victim. The underlying cause is application functionality using predictable URL/form actions in a repeatable way. The nature of the attack is that CSRF exploits the trust that a web site has for a user. By contrast, cross-site scripting (XSS) exploits the trust that a user has for a web site. Like XSS, CSRF attacks are not necessarily cross-site, but they can be. Cross-site request forgery is also known as CSRF, XSRF, one-click attack, session riding, confused deputy, and sea surf. CSRF attacks are effective in a number of situations, including: * The victim has an active session on the target site. * The victim is authenticated via HTTP auth on the target site. * The victim is on the same local network as the target site. CSRF has primarily been used to perform an action against a target site using the victim's privileges, but recent techniques have been discovered to disclose information by gaining access to the response. The risk of information disclosure is dramatically increased when the target site is vulnerable to XSS, because XSS can be used as a platform for CSRF, allowing the attack to operate within the bounds of the same-origin policy.

URL	http://testhtml5.vulnweb.com
Method	GET
Parameter
Attack
Evidence	<form class="modal-body" action="/login" method="POST" id="loginForm">
Show / hide Request and Response
Request Header - size: 217 bytes.	GET http://testhtml5.vulnweb.com HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/
Method	GET
Parameter
Attack
Evidence	<form class="modal-body" action="/login" method="POST" id="loginForm">
Show / hide Request and Response
Request Header - size: 218 bytes.	GET http://testhtml5.vulnweb.com/ HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
Instances	2
Solution	Phase: Architecture and Design Use a vetted library or framework that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid. For example, use anti-CSRF packages such as the OWASP CSRFGuard. Phase: Implementation Ensure that your application is free of cross-site scripting issues, because most CSRF defenses can be bypassed using attacker-controlled script. Phase: Architecture and Design Generate a unique nonce for each form, place the nonce into the form, and verify the nonce upon receipt of the form. Be sure that the nonce is not predictable (CWE-330). Note that this can be bypassed using XSS. Identify especially dangerous operations. When the user performs a dangerous operation, send a separate confirmation request to ensure that the user intended to perform that operation. Note that this can be bypassed using XSS. Use the ESAPI Session Management control. This control includes a component for CSRF. Do not use the GET method for any request that triggers a state change. Phase: Implementation Check the HTTP Referer header to see if the request originated from an expected page. This could break legitimate functionality, because users or proxies may have disabled sending the Referer for privacy reasons.
Reference	http://projects.webappsec.org/Cross-Site-Request-Forgery http://cwe.mitre.org/data/definitions/352.html
Tags	OWASP_2021_A01 WSTG-v42-SESS-05 OWASP_2017_A05
CWE Id	352
WASC Id	9
Plugin Id	10202

Medium	Content Security Policy (CSP) Header Not Set
Description	Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement or distribution of malware. CSP provides a set of standard HTTP headers that allow website owners to declare approved sources of content that browsers should be allowed to load on that page — covered types are JavaScript, CSS, HTML frames, fonts, images and embeddable objects such as Java applets, ActiveX, audio and video files.

URL	http://testhtml5.vulnweb.com
Method	GET
Parameter
Attack
Evidence
Show / hide Request and Response
Request Header - size: 217 bytes.	GET http://testhtml5.vulnweb.com HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/
Method	GET
Parameter
Attack
Evidence
Show / hide Request and Response
Request Header - size: 218 bytes.	GET http://testhtml5.vulnweb.com/ HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/robots.txt
Method	GET
Parameter
Attack
Evidence
Show / hide Request and Response
Request Header - size: 228 bytes.	GET http://testhtml5.vulnweb.com/robots.txt HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 170 bytes.	HTTP/1.1 404 NOT FOUND Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 232 Connection: keep-alive
Response Body - size: 232 bytes.	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"> <title>404 Not Found</title> <h1>Not Found</h1> <p>The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.</p>
URL	http://testhtml5.vulnweb.com/sitemap.xml
Method	GET
Parameter
Attack
Evidence
Show / hide Request and Response
Request Header - size: 229 bytes.	GET http://testhtml5.vulnweb.com/sitemap.xml HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 170 bytes.	HTTP/1.1 404 NOT FOUND Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 232 Connection: keep-alive
Response Body - size: 232 bytes.	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"> <title>404 Not Found</title> <h1>Not Found</h1> <p>The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.</p>
Instances	4
Solution	Ensure that your web server, application server, load balancer, etc. is configured to set the Content-Security-Policy header, to achieve optimal browser support: "Content-Security-Policy" for Chrome 25+, Firefox 23+ and Safari 7+, "X-Content-Security-Policy" for Firefox 4.0+ and Internet Explorer 10+, and "X-WebKit-CSP" for Chrome 14+ and Safari 6+.
Reference	https://developer.mozilla.org/en-US/docs/Web/Security/CSP/Introducing_Content_Security_Policy https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html http://www.w3.org/TR/CSP/ http://w3c.github.io/webappsec/specs/content-security-policy/csp-specification.dev.html http://www.html5rocks.com/en/tutorials/security/content-security-policy/ http://caniuse.com/#feat=contentsecuritypolicy http://content-security-policy.com/
Tags	OWASP_2021_A05 OWASP_2017_A06
CWE Id	693
WASC Id	15
Plugin Id	10038

Medium	Cross-Domain Misconfiguration
Description	Web browser data loading may be possible, due to a Cross Origin Resource Sharing (CORS) misconfiguration on the web server

URL	http://testhtml5.vulnweb.com
Method	GET
Parameter
Attack
Evidence	Access-Control-Allow-Origin: *
Show / hide Request and Response
Request Header - size: 217 bytes.	GET http://testhtml5.vulnweb.com HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/
Method	GET
Parameter
Attack
Evidence	Access-Control-Allow-Origin: *
Show / hide Request and Response
Request Header - size: 218 bytes.	GET http://testhtml5.vulnweb.com/ HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
Instances	2
Solution	Ensure that sensitive data is not available in an unauthenticated manner (using IP address white-listing, for instance). Configure the "Access-Control-Allow-Origin" HTTP header to a more restrictive set of domains, or remove all CORS headers entirely, to allow the web browser to enforce the Same Origin Policy (SOP) in a more restrictive manner.
Reference	https://vulncat.fortify.com/en/detail?id=desc.config.dotnet.html5_overly_permissive_cors_policy
Tags	OWASP_2021_A01 OWASP_2017_A05
CWE Id	264
WASC Id	14
Plugin Id	10098

Medium	Missing Anti-clickjacking Header
Description	The response does not include either Content-Security-Policy with 'frame-ancestors' directive or X-Frame-Options to protect against 'ClickJacking' attacks.

URL	http://testhtml5.vulnweb.com
Method	GET
Parameter	X-Frame-Options
Attack
Evidence
Show / hide Request and Response
Request Header - size: 217 bytes.	GET http://testhtml5.vulnweb.com HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/
Method	GET
Parameter	X-Frame-Options
Attack
Evidence
Show / hide Request and Response
Request Header - size: 218 bytes.	GET http://testhtml5.vulnweb.com/ HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
Instances	2
Solution	Modern Web browsers support the Content-Security-Policy and X-Frame-Options HTTP headers. Ensure one of them is set on all web pages returned by your site/app. If you expect the page to be framed only by pages on your server (e.g. it's part of a FRAMESET) then you'll want to use SAMEORIGIN, otherwise if you never expect the page to be framed, you should use DENY. Alternatively consider implementing Content Security Policy's "frame-ancestors" directive.
Reference	https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
Tags	OWASP_2021_A05 WSTG-v42-CLNT-09 OWASP_2017_A06
CWE Id	1021
WASC Id	15
Plugin Id	10020

Medium	Vulnerable JS Library
Description	The identified library sessvars, version 1.00 is vulnerable.

URL	http://testhtml5.vulnweb.com/static/app/libs/sessvars.js
Method	GET
Parameter
Attack
Evidence	sessvars ver 1.00
Show / hide Request and Response
Request Header - size: 284 bytes.	GET http://testhtml5.vulnweb.com/static/app/libs/sessvars.js HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 325 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: application/javascript Content-Length: 8869 Last-Modified: Tue, 07 May 2013 10:17:48 GMT Connection: keep-alive ETag: "5188d4cc-22a5" Expires: Fri, 13 Jan 2023 06:06:13 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes
Response Body - size: 8,869 bytes.	/* sessvars ver 1.00 - JavaScript based session object copyright 2008 Thomas Frank This EULA grants you the following rights: Installation and Use. You may install and use an unlimited number of copies of the SOFTWARE PRODUCT. Reproduction and Distribution. You may reproduce and distribute an unlimited number of copies of the SOFTWARE PRODUCT either in whole or in part; each copy should include all copyright and trademark notices, and shall be accompanied by a copy of this EULA. Copies of the SOFTWARE PRODUCT may be distributed as a standalone product or included with your own product. Commercial Use. You may sell for profit and freely distribute scripts and/or compiled scripts that were created with the SOFTWARE PRODUCT. */ sessvars=function(){ var x={}; x.$={ prefs:{ memLimit:2000, autoFlush:true, crossDomain:true, includeProtos:false, includeFunctions:true }, parent:x, clearMem:function(){ for(var i in this.parent){if(i!="$"){this.parent[i]=undefined}}; this.flush(); }, usedMem:function(){ x={}; return Math.round(this.flush(x)/1024); }, usedMemPercent:function(){ return Math.round(this.usedMem()/this.prefs.memLimit); }, flush:function(x){ var y,o={},j=this.$$; x=x\|\|top; for(var i in this.parent){o[i]=this.parent[i]}; o.$=this.prefs; j.includeProtos=this.prefs.includeProtos; j.includeFunctions=this.prefs.includeFunctions; y=this.$$.make(o); if(x!=top){return y.length}; if(y.length/1024>this.prefs.memLimit){return false} x.name=y; return true; }, getDomain:function(){ var l=location.href l=l.split("///").join("//"); l=l.substring(l.indexOf("://")+3).split("/")[0]; while(l.split(".").length>2){l=l.substring(l.indexOf(".")+1)}; return l }, debug:function(t){ var t=t\|\|this,a=arguments.callee; if(!document.body){setTimeout(function(){a(t)},200);return}; t.flush(); var d=document.getElementById("sessvarsDebugDiv"); if(!d){d=document.createElement("div");document.body.insertBefore(d,document.body.firstChild)}; d.id="sessvarsDebugDiv"; d.innerHTML='<div style="line-height:20px;padding:5px;font-size:11px;font-family:Verdana,Arial,Helvetica;'+ 'z-index:10000;background:#FFFFCC;border: 1px solid #333;margin-bottom:12px">'+ '<b style="font-family:Trebuchet MS;font-size:20px">sessvars.js - debug info:</b><br/><br/>'+ 'Memory usage: '+t.usedMem()+' Kb ('+t.usedMemPercent()+'%)   '+ '<span style="cursor:pointer"><b>[Clear memory]</b></span><br/>'+ top.name.split('\n').join('<br/>')+'</div>'; d.getElementsByTagName('span')[0].onclick=function(){t.clearMem();location.reload()} }, init:function(){ var o={}, t=this; try {o=this.$$.toObject(top.name)} catch(e){o={}}; this.prefs=o.$\|\|t.prefs; if(this.prefs.crossDomain \|\| this.prefs.currentDomain==this.getDomain()){ for(var i in o){this.parent[i]=o[i]}; } else { this.prefs.currentDomain=this.getDomain(); }; this.parent.$=t; t.flush(); var f=function(){if(t.prefs.autoFlush){t.flush()}}; if(window["addEventListener"]){addEventListener("unload",f,false)} else if(window["attachEvent"]){window.attachEvent("onunload",f)} else {this.prefs.autoFlush=false}; } }; x.$.$$={ compactOutput:false, includeProtos:false, includeFunctions: false, detectCirculars:true, restoreCirculars:true, make:function(arg,restore) { this.restore=restore; this.mem=[];this.pathMem=[]; return this.toJsonStringArray(arg).join(''); }, toObject:function(x){ eval("this.myObj="+x); if(!this.restoreCirculars \|\| !alert){return this.myObj}; if(this.includeFunctions){ var x=this.myObj; for(var i in x){if(typeof x[i]=="string" && !x[i].indexOf("JSONincludedFunc:")){ x[i]=x[i].substring(17); eval("x[i]="+x[i]) }} }; this.restoreCode=[]; this.make(this.myObj,true); var r=this.restoreCode.join(";")+";"; eval('r=r.replace(/\\W([0-9]{1,})(\\W)/g,"[$1]$2").replace(/\\.\\;/g,";")'); eval(r); return this.myObj }, toJsonStringArray:function(arg, out) { if(!out){this.path=[]}; out = out \|\| []; var u; // undefined switch (typeof arg) { case 'object': this.lastObj=arg; if(this.detectCirculars){ var m=this.mem; var n=this.pathMem; for(var i=0;i<m.length;i++){ if(arg===m[i]){ out.push('"JSONcircRef:'+n[i]+'"');return out } }; m.push(arg); n.push(this.path.join(".")); }; if (arg) { if (arg.constructor == Array) { out.push('['); for (var i = 0; i < arg.length; ++i) { this.path.push(i); if (i > 0) out.push(',\n'); this.toJsonStringArray(arg[i], out); this.path.pop(); } out.push(']'); return out; } else if (typeof arg.toString != 'undefined') { out.push('{'); var first = true; for (var i in arg) { if(!this.includeProtos && arg[i]===arg.constructor.prototype[i]){continue}; this.path.push(i); var curr = out.length; if (!first) out.push(this.compactOutput?',':',\n'); this.toJsonStringArray(i, out); out.push(':'); this.toJsonStringArray(arg[i], out); if (out[out.length - 1] == u) out.splice(curr, out.length - curr); else first = false; this.path.pop(); } out.push('}'); return out; } return out; } out.push('null'); return out; case 'unknown': case 'undefined': case 'function': if(!this.includeFunctions){out.push(u);return out}; arg="JSONincludedFunc:"+arg; out.push('"'); var a=['\n','\\n','\r','\\r','"','\\"']; arg+=""; for(var i=0;i<6;i+=2){arg=arg.split(a[i]).join(a[i+1])}; out.push(arg); out.push('"'); return out; case 'string': if(this.restore && arg.indexOf("JSONcircRef:")==0){ this.restoreCode.push('this.myObj.'+this.path.join(".")+"="+arg.split("JSONcircRef:").join("this.myObj.")); }; out.push('"'); var a=['\n','\\n','\r','\\r','"','\\"']; arg+=""; for(var i=0;i<6;i+=2){arg=arg.split(a[i]).join(a[i+1])}; out.push(arg); out.push('"'); return out; default: out.push(String(arg)); return out; } } }; x.$.init(); return x; }()
Instances	1
Solution	Please upgrade to the latest version of sessvars.
Reference	http://www.thomasfrank.se/sessionvars.html
Tags	OWASP_2017_A09 OWASP_2021_A06
CWE Id	829
WASC Id
Plugin Id	10003

Low	Cookie No HttpOnly Flag
Description	A cookie has been set without the HttpOnly flag, which means that the cookie can be accessed by JavaScript. If a malicious script can be run on this page then the cookie will be accessible and can be transmitted to another site. If this is a session cookie then session hijacking may be possible.

URL	http://testhtml5.vulnweb.com/login
Method	POST
Parameter	username
Attack
Evidence	Set-Cookie: username
Show / hide Request and Response
Request Header - size: 332 bytes.	POST http://testhtml5.vulnweb.com/login HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Content-Type: application/x-www-form-urlencoded Referer: http://testhtml5.vulnweb.com Content-Length: 27
Request Body - size: 27 bytes.	username=admin&password=ZAP
Response Header - size: 243 bytes.	HTTP/1.1 302 FOUND Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 265 Connection: keep-alive Location: http://testhtml5.vulnweb.com/ Set-Cookie: username=admin; Path=/
Response Body - size: 265 bytes.	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"> <title>Redirecting...</title> <h1>Redirecting...</h1> <p>You should be redirected automatically to target URL: <a href="http://testhtml5.vulnweb.com/">http://testhtml5.vulnweb.com/</a>. If not click the link.
Instances	1
Solution	Ensure that the HttpOnly flag is set for all cookies.
Reference	https://owasp.org/www-community/HttpOnly
Tags	OWASP_2021_A05 WSTG-v42-SESS-02 OWASP_2017_A06
CWE Id	1004
WASC Id	13
Plugin Id	10010

Low	Cookie without SameSite Attribute
Description	A cookie has been set without the SameSite attribute, which means that the cookie can be sent as a result of a 'cross-site' request. The SameSite attribute is an effective counter measure to cross-site request forgery, cross-site script inclusion, and timing attacks.

URL	http://testhtml5.vulnweb.com/login
Method	POST
Parameter	username
Attack
Evidence	Set-Cookie: username
Show / hide Request and Response
Request Header - size: 332 bytes.	POST http://testhtml5.vulnweb.com/login HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Content-Type: application/x-www-form-urlencoded Referer: http://testhtml5.vulnweb.com Content-Length: 27
Request Body - size: 27 bytes.	username=admin&password=ZAP
Response Header - size: 243 bytes.	HTTP/1.1 302 FOUND Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 265 Connection: keep-alive Location: http://testhtml5.vulnweb.com/ Set-Cookie: username=admin; Path=/
Response Body - size: 265 bytes.	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"> <title>Redirecting...</title> <h1>Redirecting...</h1> <p>You should be redirected automatically to target URL: <a href="http://testhtml5.vulnweb.com/">http://testhtml5.vulnweb.com/</a>. If not click the link.
Instances	1
Solution	Ensure that the SameSite attribute is set to either 'lax' or ideally 'strict' for all cookies.
Reference	https://tools.ietf.org/html/draft-ietf-httpbis-cookie-same-site
Tags	OWASP_2021_A01 WSTG-v42-SESS-02 OWASP_2017_A05
CWE Id	1275
WASC Id	13
Plugin Id	10054

Low	Cross-Domain JavaScript Source File Inclusion
Description	The page includes one or more script files from a third-party domain.

URL	http://testhtml5.vulnweb.com
Method	GET
Parameter	http://bxss.s3.amazonaws.com/ad.js
Attack
Evidence	<script src="http://bxss.s3.amazonaws.com/ad.js"></script>
Show / hide Request and Response
Request Header - size: 217 bytes.	GET http://testhtml5.vulnweb.com HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com
Method	GET
Parameter	http://code.jquery.com/jquery-1.9.1.min.js
Attack
Evidence	<script src="http://code.jquery.com/jquery-1.9.1.min.js"></script>
Show / hide Request and Response
Request Header - size: 217 bytes.	GET http://testhtml5.vulnweb.com HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com
Method	GET
Parameter	http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js
Attack
Evidence	<script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script>
Show / hide Request and Response
Request Header - size: 217 bytes.	GET http://testhtml5.vulnweb.com HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com
Method	GET
Parameter	https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js
Attack
Evidence	<script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script>
Show / hide Request and Response
Request Header - size: 217 bytes.	GET http://testhtml5.vulnweb.com HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/
Method	GET
Parameter	http://bxss.s3.amazonaws.com/ad.js
Attack
Evidence	<script src="http://bxss.s3.amazonaws.com/ad.js"></script>
Show / hide Request and Response
Request Header - size: 218 bytes.	GET http://testhtml5.vulnweb.com/ HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/
Method	GET
Parameter	http://code.jquery.com/jquery-1.9.1.min.js
Attack
Evidence	<script src="http://code.jquery.com/jquery-1.9.1.min.js"></script>
Show / hide Request and Response
Request Header - size: 218 bytes.	GET http://testhtml5.vulnweb.com/ HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/
Method	GET
Parameter	http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js
Attack
Evidence	<script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script>
Show / hide Request and Response
Request Header - size: 218 bytes.	GET http://testhtml5.vulnweb.com/ HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/
Method	GET
Parameter	https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js
Attack
Evidence	<script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script>
Show / hide Request and Response
Request Header - size: 218 bytes.	GET http://testhtml5.vulnweb.com/ HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
Instances	8
Solution	Ensure JavaScript source files are loaded from only trusted sources, and the sources can't be controlled by end users of the application.
Reference
Tags	OWASP_2021_A08
CWE Id	829
WASC Id	15
Plugin Id	10017

Low	Server Leaks Version Information via "Server" HTTP Response Header Field
Description	The web/application server is leaking version information via the "Server" HTTP response header. Access to such information may facilitate attackers identifying other vulnerabilities your web/application server is subject to.

URL	http://testhtml5.vulnweb.com
Method	GET
Parameter
Attack
Evidence	nginx/1.19.0
Show / hide Request and Response
Request Header - size: 217 bytes.	GET http://testhtml5.vulnweb.com HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/
Method	GET
Parameter
Attack
Evidence	nginx/1.19.0
Show / hide Request and Response
Request Header - size: 218 bytes.	GET http://testhtml5.vulnweb.com/ HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/logout
Method	GET
Parameter
Attack
Evidence	nginx/1.19.0
Show / hide Request and Response
Request Header - size: 429 bytes.	GET http://testhtml5.vulnweb.com/logout HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Referer: http://testhtml5.vulnweb.com/ Cookie: username=adminKcvIItkE Upgrade-Insecure-Requests: 1
Request Body - size: 0 bytes.
Response Header - size: 277 bytes.	HTTP/1.1 302 FOUND Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:07:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 265 Connection: keep-alive Location: http://testhtml5.vulnweb.com/ Set-Cookie: username=; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Path=/
Response Body - size: 265 bytes.	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"> <title>Redirecting...</title> <h1>Redirecting...</h1> <p>You should be redirected automatically to target URL: <a href="http://testhtml5.vulnweb.com/">http://testhtml5.vulnweb.com/</a>. If not click the link.
URL	http://testhtml5.vulnweb.com/robots.txt
Method	GET
Parameter
Attack
Evidence	nginx/1.19.0
Show / hide Request and Response
Request Header - size: 228 bytes.	GET http://testhtml5.vulnweb.com/robots.txt HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 170 bytes.	HTTP/1.1 404 NOT FOUND Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 232 Connection: keep-alive
Response Body - size: 232 bytes.	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"> <title>404 Not Found</title> <h1>Not Found</h1> <p>The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.</p>
URL	http://testhtml5.vulnweb.com/sitemap.xml
Method	GET
Parameter
Attack
Evidence	nginx/1.19.0
Show / hide Request and Response
Request Header - size: 229 bytes.	GET http://testhtml5.vulnweb.com/sitemap.xml HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 170 bytes.	HTTP/1.1 404 NOT FOUND Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 232 Connection: keep-alive
Response Body - size: 232 bytes.	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"> <title>404 Not Found</title> <h1>Not Found</h1> <p>The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.</p>
URL	http://testhtml5.vulnweb.com/static/app/app.js
Method	GET
Parameter
Attack
Evidence	nginx/1.19.0
Show / hide Request and Response
Request Header - size: 274 bytes.	GET http://testhtml5.vulnweb.com/static/app/app.js HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 324 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: application/javascript Content-Length: 1884 Last-Modified: Tue, 14 May 2013 09:19:07 GMT Connection: keep-alive ETag: "5192018b-75c" Expires: Fri, 13 Jan 2023 06:06:13 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes
Response Body - size: 1,884 bytes.	function getPartialUrl(name) { return "/static/app/partials/" + name + ".html"; } // app initialization var app = angular.module('itemsApp', []); //This configures the routes and associates each route with a view and a controller app.config(function ($routeProvider) { $routeProvider .when('/popular', { controller: 'PopularItemsController', templateUrl: getPartialUrl('popular') }) .when('/popular/page/:page', { controller: 'PopularItemsController', templateUrl: getPartialUrl('popular') }) .when('/redir', { controller: 'SimpleController', templateUrl: getPartialUrl('redir') }) .when('/all/filter/:filter', { controller: 'PopularItemsController', templateUrl: getPartialUrl('popular') }) .when('/latest', { controller: 'LatestItemsController', templateUrl: getPartialUrl('latest') }) .when('/latest/page/:page', { controller: 'LatestItemsController', templateUrl: getPartialUrl('latest') }) .when('/carousel', { controller: 'PopularItemsController', templateUrl: getPartialUrl('carousel') }) .when('/archive', { controller: 'ArchiveItemsController', templateUrl: getPartialUrl('archive') }) .when('/about', { controller: 'SimpleController', templateUrl: getPartialUrl('about') }) .when('/contact', { controller: 'SimpleController', templateUrl: getPartialUrl('contact') }) .otherwise({ redirectTo: '/popular' }); });
URL	http://testhtml5.vulnweb.com/static/app/controllers/controllers.js
Method	GET
Parameter
Attack
Evidence	nginx/1.19.0
Show / hide Request and Response
Request Header - size: 294 bytes.	GET http://testhtml5.vulnweb.com/static/app/controllers/controllers.js HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 324 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: application/javascript Content-Length: 2582 Last-Modified: Fri, 10 May 2013 10:11:54 GMT Connection: keep-alive ETag: "518cc7ea-a16" Expires: Fri, 13 Jan 2023 06:06:13 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes
Response Body - size: 2,582 bytes.	app.controller('PopularItemsController', function ($scope, $routeParams, itemsService) { $scope.ctrlName = "popular"; $scope.showLoader = showLoader; $scope.hideLoader = hideLoader; $scope.showLoader(); $scope.page = ($routeParams.page) ? parseInt($routeParams.page) : 0; $scope.pageStr = ($routeParams.page) ? $routeParams.page : "0"; $scope.filter = ($routeParams.filter) ? $routeParams.filter : ""; if ($scope.filter) { itemsService.getArchiveItems(function(data, status) { if (status < 200 \|\| status >= 300) return; $scope.items = data; $scope.hideLoader(); }); } else { itemsService.getPopularItems($scope.page, function(data, status) { if (status < 200 \|\| status >= 300) return; $scope.items = data; $scope.hideLoader(); }); } $scope.like = function(id) { itemsService.like(id, function(data, status) { if (status < 200 \|\| status >= 300) return; $scope.response = data; }); }; }); app.controller('LatestItemsController', function ($scope, $routeParams, itemsService) { $scope.ctrlName = "latest"; $scope.showLoader = showLoader; $scope.hideLoader = hideLoader; $scope.showLoader(); $scope.page = ($routeParams.page) ? parseInt($routeParams.page) : 0; $scope.pageStr = ($routeParams.page) ? $routeParams.page : "0"; $scope.filter = ($routeParams.filter) ? $routeParams.filter : ""; itemsService.getLatestItems($scope.page, function(data, status) { if (status < 200 \|\| status >= 300) return; $scope.items = data; $scope.hideLoader(); }); $scope.like = function(id) { itemsService.like(id, function(data, status) { if (status < 200 \|\| status >= 300) return; $scope.response = data; }); }; }); app.controller('ArchiveItemsController', function ($scope, $routeParams, itemsService) { $scope.ctrlName = "archive"; $scope.showLoader = showLoader; $scope.hideLoader = hideLoader; $scope.showLoader(); itemsService.getArchiveItems(function(data, status) { if (status < 200 \|\| status >= 300) return; $scope.items = data; $scope.hideLoader(); }); }); app.controller('SimpleController', function ($scope, itemsService) {});
URL	http://testhtml5.vulnweb.com/static/app/libs/sessvars.js
Method	GET
Parameter
Attack
Evidence	nginx/1.19.0
Show / hide Request and Response
Request Header - size: 284 bytes.	GET http://testhtml5.vulnweb.com/static/app/libs/sessvars.js HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 325 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: application/javascript Content-Length: 8869 Last-Modified: Tue, 07 May 2013 10:17:48 GMT Connection: keep-alive ETag: "5188d4cc-22a5" Expires: Fri, 13 Jan 2023 06:06:13 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes
Response Body - size: 8,869 bytes.	/* sessvars ver 1.00 - JavaScript based session object copyright 2008 Thomas Frank This EULA grants you the following rights: Installation and Use. You may install and use an unlimited number of copies of the SOFTWARE PRODUCT. Reproduction and Distribution. You may reproduce and distribute an unlimited number of copies of the SOFTWARE PRODUCT either in whole or in part; each copy should include all copyright and trademark notices, and shall be accompanied by a copy of this EULA. Copies of the SOFTWARE PRODUCT may be distributed as a standalone product or included with your own product. Commercial Use. You may sell for profit and freely distribute scripts and/or compiled scripts that were created with the SOFTWARE PRODUCT. */ sessvars=function(){ var x={}; x.$={ prefs:{ memLimit:2000, autoFlush:true, crossDomain:true, includeProtos:false, includeFunctions:true }, parent:x, clearMem:function(){ for(var i in this.parent){if(i!="$"){this.parent[i]=undefined}}; this.flush(); }, usedMem:function(){ x={}; return Math.round(this.flush(x)/1024); }, usedMemPercent:function(){ return Math.round(this.usedMem()/this.prefs.memLimit); }, flush:function(x){ var y,o={},j=this.$$; x=x\|\|top; for(var i in this.parent){o[i]=this.parent[i]}; o.$=this.prefs; j.includeProtos=this.prefs.includeProtos; j.includeFunctions=this.prefs.includeFunctions; y=this.$$.make(o); if(x!=top){return y.length}; if(y.length/1024>this.prefs.memLimit){return false} x.name=y; return true; }, getDomain:function(){ var l=location.href l=l.split("///").join("//"); l=l.substring(l.indexOf("://")+3).split("/")[0]; while(l.split(".").length>2){l=l.substring(l.indexOf(".")+1)}; return l }, debug:function(t){ var t=t\|\|this,a=arguments.callee; if(!document.body){setTimeout(function(){a(t)},200);return}; t.flush(); var d=document.getElementById("sessvarsDebugDiv"); if(!d){d=document.createElement("div");document.body.insertBefore(d,document.body.firstChild)}; d.id="sessvarsDebugDiv"; d.innerHTML='<div style="line-height:20px;padding:5px;font-size:11px;font-family:Verdana,Arial,Helvetica;'+ 'z-index:10000;background:#FFFFCC;border: 1px solid #333;margin-bottom:12px">'+ '<b style="font-family:Trebuchet MS;font-size:20px">sessvars.js - debug info:</b><br/><br/>'+ 'Memory usage: '+t.usedMem()+' Kb ('+t.usedMemPercent()+'%)   '+ '<span style="cursor:pointer"><b>[Clear memory]</b></span><br/>'+ top.name.split('\n').join('<br/>')+'</div>'; d.getElementsByTagName('span')[0].onclick=function(){t.clearMem();location.reload()} }, init:function(){ var o={}, t=this; try {o=this.$$.toObject(top.name)} catch(e){o={}}; this.prefs=o.$\|\|t.prefs; if(this.prefs.crossDomain \|\| this.prefs.currentDomain==this.getDomain()){ for(var i in o){this.parent[i]=o[i]}; } else { this.prefs.currentDomain=this.getDomain(); }; this.parent.$=t; t.flush(); var f=function(){if(t.prefs.autoFlush){t.flush()}}; if(window["addEventListener"]){addEventListener("unload",f,false)} else if(window["attachEvent"]){window.attachEvent("onunload",f)} else {this.prefs.autoFlush=false}; } }; x.$.$$={ compactOutput:false, includeProtos:false, includeFunctions: false, detectCirculars:true, restoreCirculars:true, make:function(arg,restore) { this.restore=restore; this.mem=[];this.pathMem=[]; return this.toJsonStringArray(arg).join(''); }, toObject:function(x){ eval("this.myObj="+x); if(!this.restoreCirculars \|\| !alert){return this.myObj}; if(this.includeFunctions){ var x=this.myObj; for(var i in x){if(typeof x[i]=="string" && !x[i].indexOf("JSONincludedFunc:")){ x[i]=x[i].substring(17); eval("x[i]="+x[i]) }} }; this.restoreCode=[]; this.make(this.myObj,true); var r=this.restoreCode.join(";")+";"; eval('r=r.replace(/\\W([0-9]{1,})(\\W)/g,"[$1]$2").replace(/\\.\\;/g,";")'); eval(r); return this.myObj }, toJsonStringArray:function(arg, out) { if(!out){this.path=[]}; out = out \|\| []; var u; // undefined switch (typeof arg) { case 'object': this.lastObj=arg; if(this.detectCirculars){ var m=this.mem; var n=this.pathMem; for(var i=0;i<m.length;i++){ if(arg===m[i]){ out.push('"JSONcircRef:'+n[i]+'"');return out } }; m.push(arg); n.push(this.path.join(".")); }; if (arg) { if (arg.constructor == Array) { out.push('['); for (var i = 0; i < arg.length; ++i) { this.path.push(i); if (i > 0) out.push(',\n'); this.toJsonStringArray(arg[i], out); this.path.pop(); } out.push(']'); return out; } else if (typeof arg.toString != 'undefined') { out.push('{'); var first = true; for (var i in arg) { if(!this.includeProtos && arg[i]===arg.constructor.prototype[i]){continue}; this.path.push(i); var curr = out.length; if (!first) out.push(this.compactOutput?',':',\n'); this.toJsonStringArray(i, out); out.push(':'); this.toJsonStringArray(arg[i], out); if (out[out.length - 1] == u) out.splice(curr, out.length - curr); else first = false; this.path.pop(); } out.push('}'); return out; } return out; } out.push('null'); return out; case 'unknown': case 'undefined': case 'function': if(!this.includeFunctions){out.push(u);return out}; arg="JSONincludedFunc:"+arg; out.push('"'); var a=['\n','\\n','\r','\\r','"','\\"']; arg+=""; for(var i=0;i<6;i+=2){arg=arg.split(a[i]).join(a[i+1])}; out.push(arg); out.push('"'); return out; case 'string': if(this.restore && arg.indexOf("JSONcircRef:")==0){ this.restoreCode.push('this.myObj.'+this.path.join(".")+"="+arg.split("JSONcircRef:").join("this.myObj.")); }; out.push('"'); var a=['\n','\\n','\r','\\r','"','\\"']; arg+=""; for(var i=0;i<6;i+=2){arg=arg.split(a[i]).join(a[i+1])}; out.push(arg); out.push('"'); return out; default: out.push(String(arg)); return out; } } }; x.$.init(); return x; }()
URL	http://testhtml5.vulnweb.com/static/app/post.js
Method	GET
Parameter
Attack
Evidence	nginx/1.19.0
Show / hide Request and Response
Request Header - size: 275 bytes.	GET http://testhtml5.vulnweb.com/static/app/post.js HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 324 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: application/javascript Content-Length: 3319 Last-Modified: Fri, 17 May 2013 12:18:21 GMT Connection: keep-alive ETag: "5196200d-cf7" Expires: Fri, 13 Jan 2023 06:06:13 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes
Response Body - size: 3,319 bytes.	// post AngularJs init // modal login form $('#loginFormSubmit').on('click', function(e){ // We don't want this to act as a link so cancel the link action e.preventDefault(); // Find form and submit it $('#loginForm').submit(); }); $('#loginFormForgot').on('click', function(e){ // We don't want this to act as a link so cancel the link action e.preventDefault(); // submit password request $.ajax({ url: "/forgotpw", data: "<forgot><username>" + $('#username').attr("value") + "</username></forgot>", type: 'POST', contentType: "text/xml", dataType: "text", success : function(data){ alert(data + ", your password was changed. You will receive an email with the new password shortly."); }, error : function (xhr, ajaxOptions, thrownError){ console.log(xhr.status); console.log(thrownError); } }); }); // when a nav link is clicked make the link active $('.nav li a').on('click', function(e){ var url = $(this).attr("href"); if (url.indexOf("http://") != 0 && url.indexOf("/admin/") != 0) e.preventDefault(); // prevent link click var $thisLi = $(this).parent('li'); var $ul = $thisLi.parent('ul'); if (!$thisLi.hasClass('active')) { $ul.find('li.active').removeClass('active'); $thisLi.addClass('active'); } }) // loader showLoader = function () { $("#loader").show(); } hideLoader = function () { $("#loader").hide(); } // take care of URL from hash $('.nav li a').each(function(){ var $thisLi = $(this).parent('li'); if ($thisLi.hasClass('active')) $thisLi.removeClass('active'); }) var foundPath = false; $('.nav li a').each(function(){ var $thisLi = $(this).parent('li'); if ($(this).attr("href") == location.hash) { $thisLi.addClass('active'); foundPath = true; } }) if (!foundPath) { $('#popularLi').addClass('active'); } // cookies function getCookie(c_name) { var c_value = document.cookie; var c_start = c_value.indexOf(" " + c_name + "="); if (c_start == -1) { c_start = c_value.indexOf(c_name + "="); } if (c_start == -1) { c_value = null; } else { c_start = c_value.indexOf("=", c_start) + 1; var c_end = c_value.indexOf(";", c_start); if (c_end == -1) { c_end = c_value.length; } c_value = unescape(c_value.substring(c_start,c_end)); } return c_value; } var cookieUsername = getCookie("username"); if (!cookieUsername) cookieUsername = "unknown"; // referrer and sessvars var referrer = "unknown"; if (document.referrer) {referrer = document.referrer;} sessvars.pageCount=sessvars.pageCount\|\|0; sessvars.pageCount++; $("#refId").html(cookieUsername + " is coming from <b>" + referrer + "</b> and has visited this page <b>" + (sessvars.pageCount) + "</b> times."); // facebook var hrf=window.location.href.toLowerCase(); if (hrf !='http://www.facebook.com/') document.write('<div class="fb-comments" data-num-posts="4" data-width="470" data-href="'+window.location.href+'"></div>')
URL	http://testhtml5.vulnweb.com/static/app/services/itemsService.js
Method	GET
Parameter
Attack
Evidence	nginx/1.19.0
Show / hide Request and Response
Request Header - size: 292 bytes.	GET http://testhtml5.vulnweb.com/static/app/services/itemsService.js HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 323 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: application/javascript Content-Length: 723 Last-Modified: Fri, 10 May 2013 09:00:28 GMT Connection: keep-alive ETag: "518cb72c-2d3" Expires: Fri, 13 Jan 2023 06:06:13 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes
Response Body - size: 723 bytes.	app.service('itemsService', function ($http) { var items_per_page = 5; var items = []; this.getPopularItems = function (page, callback) { var offset = page * items_per_page; $http.get('/ajax/popular?offset=' + offset).success(callback); }; this.getLatestItems = function (page, callback) { var offset = page * items_per_page; $http.get('/ajax/latest?offset=' + offset).success(callback); }; this.getArchiveItems = function (callback) { $http.get('/ajax/archive').success(callback); }; this.like = function (id, callback) { $http.get('/ajax/like?id=' + id).success(callback).error(callback); }; });
URL	http://testhtml5.vulnweb.com/static/css/style.css
Method	GET
Parameter
Attack
Evidence	nginx/1.19.0
Show / hide Request and Response
Request Header - size: 277 bytes.	GET http://testhtml5.vulnweb.com/static/css/style.css HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 309 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: text/css Content-Length: 570 Last-Modified: Fri, 10 May 2013 09:00:28 GMT Connection: keep-alive ETag: "518cb72c-23a" Expires: Fri, 13 Jan 2023 06:06:13 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes
Response Body - size: 570 bytes.	.screenshot { border: 1px solid #DADADA; } .shadow { box-shadow: 0px 2px 0px 0px #D9D9D9; } .detailsbox { font-family: 'Lora', sans-serif; font-size: 15px; background: #fefefe; margin-bottom: 0px; padding-top: 5px; height: 378px !important; } .detailsboxTitle { font-weight: bold; font-size: large; padding-top: 10px; } .carouselView{ width: 600px; } .archivebox { background: #eeeeee; } .archiveboxinteresting { background: #fff7ec; } body .modal { width: 400px; }
URL	http://testhtml5.vulnweb.com/static/img/logo2.png
Method	GET
Parameter
Attack
Evidence	nginx/1.19.0
Show / hide Request and Response
Request Header - size: 277 bytes.	GET http://testhtml5.vulnweb.com/static/img/logo2.png HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 311 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: image/png Content-Length: 2736 Last-Modified: Thu, 02 May 2013 14:50:21 GMT Connection: keep-alive ETag: "51827d2d-ab0" Expires: Fri, 13 Jan 2023 06:06:13 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes
Response Body - size: 2,736 bytes.	PNG IHDR«tà¿sRGB®ÎégAMA±üa pHYsÃÃÇo¨dtEXtSoftwarePaint.NET v3.5.100ôr¡ IDAThCímWÇgîËÙew»j±JÚomüP_hLúA?H5¶¾\|0ñ¦IM~c«®Ò » "ÄÅ¸JlXJîfÅíºaÙ{Îív! BÈøÿ{&çÎÎ¹twÉ½;gæÌ9ÏùÿyçÌu?Ùê9ªA¸Jò=!¸ÇT½9ªQ< =qôq¾ÉªÁËËfÏÓVmXAý¨Û &¬Pf zªèÏTE±PÄbKdÞ_¡ò~»ÊWUN´ãX)â²(Æñ ÜslòÅ± n±uXëµV&ðªi³¢NEÿ ó_[+þã¨r\|)ÿøÎC)çQ.sbÀ]À?+ÄLÙâåF¦{ÌÖÚÐúõu¸+@ÍE éùóeÁÿ@ý½rýÁq(ßÅgÖ1]1h·«ÿ]¸Ó<ð±Ö ÀÖá«ÃW+D ÓÇRþ)@útýÀ9R IK@þ&\Ã§}\¶ §µÖ¾® V¬X¬Zµ8wî^s2l2$çx&<,û¨Ë±¤÷ÒòMªá}À»Jý¸jDÖZÍjü7ÁÁÁpÀÛÚÚeËÛ¶meÝÿ^³l3îîîIiëùóç£:uÝñÏÉzÖ{i»´gÿÖfÇ=OæÅÏ ¨ÿªaÙÏrì²e¨ÿdòÖ´FÆ[·ZçÈ#Àí$eåÄÓpñ{Ï¾`Ý¼ysdö§V8²Ás±TÏ@`ô=ø½4eAXKù(íü<2÷«VøÅÅÔÒ êêÕ««W¯ÖÜÑZ 3Ù××a [¹R¤§Äø_¤£ ²Ñ¿_÷gùÉÿ³/C±ÿ ñEÛ,A¬\Î´ ±×®]~¥T000ð¾àß¬æä¡röìu»ê»uX@èGP¿áPGpÍ?dÎÿ_si»Çv?{¥ÝT×Ûð_fÖµk×år9Öv!Þ´iS4kÖ¬ :4Á·%ðÖ[ùÁÚÏ³Áda»öÄIØÆø u~æÎ;£6Ó'¿téRE7lØ8p ³ÁzòäÉÉ¬ßõ³Ï9c}vQ®_¿<x0êï¥?>a._¾ìÙ³gB\|qöìÙèZÓ&¦ ôã¢ËûúúåÀü8RM] » Ï+á=<ìBu¯÷¨jñB)?%þ¹0ÇÊ\|kÈÿ:>Ý°\|¬¤ ¢££#×¼µô{u0ÆO3ð+ÓÍÂJ ®¯XÙ¦+9MYÍ À «mÅïº»wïÎs¢éóÚÅ¢µqãF«]MûÂÅ6lkÜ&qX&Üäî9Pºg¡ÿIL².DôO+i¨¢øx)õ(å±«õ,,ÜÁ°Ü4°Ô5xH½¯3E+ `76g®.#ãêºú¼ÆlêÆ¶Lg)k¼mI°V[?ëÒjhBW4XMuåsòàw³ú97ø`ÓíâýTZ½âÇ¼vçÇAÈYÍ 0ÏÇUßäÄ¿úÓ_ujølD¿ ¾´Öß÷¿qÏñ9ã5(ëPØ(ÿ6þïÇèûâ\|¥Êi°²L/-ÌWÆ ±h¢mFëó]]]!¦@ÇÝUVB s©ºÎ¤AIóYM5$###îA< ÌòYÍú¨ÐI+4]SÉÖ¯_iW¶íÊ²?Ë56XwíÚUÑ_[°R '©!áBàÕIå`bwBþUá×QÏ7,`Þ>t%grx§ feÁj_¼x10g0 ÀÔéÛÚ¦Ó,OJ0A\²îÛ·oW+¬L³}æ²æÊÕ\ÚwìØð`ýTkmGÂÉ¶ÇUv¯@¶«tëJrÌ1 0uvvNXMã¶u t\c¥{åËá§.ÀßXmAT ®ÁËØ{à¾l¶ÿ»p:¥ï}( VÎø-[¶§O1si¢âÊ»¬EYÍ9!²1Ý§Zaå}IÏ\BM{eÁÊk5 &xbLã¾ª~©¬ãPË{ü/®¬YTM6àÆ}Z]/aå& Öa¨àRäbd¿IÙÕE=¯îõ¦?(mÖêù´yiËRL.¼ßôYiv÷ë #ËgË\Ò´ïºX9Aã~ºmó£XãP²níNþ0ÁOtSz{{CÒ¶¦âëHß\ñ=îù\¬tÕÔ÷Vø¬çM¬Êú °ù¸® ¹Ò4e].gxâº_¦¤±ÆUÀ]sm°rÉO®èÃûí6Ùy÷Ê+a³²Y»ffPq;`e÷îÝ ²m+Wk\]÷ïß <Ö¦ªÚVi;æ¶.í 0'B¬ñt m\|9þhóYC%uÅ&Dúáø `}=A]qÿêùx®ïHÉÐ `}LSVlh{{{dTæ1¦âßËÜr 9ß'èéé #XóÚ´<+¯ãõýýýQc]Ì!Ï½°rÐÍIÊ Èf£ja5ÕÕÌyRaõ³lî~7Cç¤i~ø+6uØö¤ì©S§ú+Ç:ns¦ÍÃëö´ ¬¿E´?ÁÓl¨ì(ãÀùv¨®åÝ8ÿCaáYqC ¬e¾¥<ozs·¹eÞm6Èê/ó¬Ï8¾³½#É/âg-Óñ^jÍÜ_/âüäZ_OûêÔVôqÃ´VR}®ÿîÿ&¶x²v7)$Æ»©ÿÕöÕÎ\|D\|»µîlÅ¢WÂ/øæ¿lô¦!©ÿ>Æ¶)>ES©EäJ÷§<«ßky ¾©+ó®GP_Àþ(~öºUmãïëÌ9Ò;¥_Ý§Ô øÂõöWØazKû[8zÖïpîËÒóîªF¿§}L8ê#yW-È¹òÑ;üæÊ_4z-üKtP_T{=ø%³7áÄ~(6ÙJõ 3>Ú8UÚâ@©®øå"yO\|¾çb,ûOa`@¨+[¿VÕ¨¢Qß<ÜÿëÃ±õÍEÀ¨niFú[WSÅ8õvL_8üÏÌ8W6$rIEND®B`
URL	http://testhtml5.vulnweb.com/login
Method	POST
Parameter
Attack
Evidence	nginx/1.19.0
Show / hide Request and Response
Request Header - size: 332 bytes.	POST http://testhtml5.vulnweb.com/login HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Content-Type: application/x-www-form-urlencoded Referer: http://testhtml5.vulnweb.com Content-Length: 27
Request Body - size: 27 bytes.	username=admin&password=ZAP
Response Header - size: 243 bytes.	HTTP/1.1 302 FOUND Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 265 Connection: keep-alive Location: http://testhtml5.vulnweb.com/ Set-Cookie: username=admin; Path=/
Response Body - size: 265 bytes.	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"> <title>Redirecting...</title> <h1>Redirecting...</h1> <p>You should be redirected automatically to target URL: <a href="http://testhtml5.vulnweb.com/">http://testhtml5.vulnweb.com/</a>. If not click the link.
Instances	13
Solution	Ensure that your web server, application server, load balancer, etc. is configured to suppress the "Server" header or provide generic details.
Reference	http://httpd.apache.org/docs/current/mod/core.html#servertokens http://msdn.microsoft.com/en-us/library/ff648552.aspx#ht_urlscan_007 http://blogs.msdn.com/b/varunm/archive/2013/04/23/remove-unwanted-http-response-headers.aspx http://www.troyhunt.com/2012/02/shhh-dont-let-your-response-headers.html
Tags	OWASP_2021_A05 OWASP_2017_A06 WSTG-v42-INFO-02
CWE Id	200
WASC Id	13
Plugin Id	10036

Low	X-Content-Type-Options Header Missing
Description	The Anti-MIME-Sniffing header X-Content-Type-Options was not set to 'nosniff'. This allows older versions of Internet Explorer and Chrome to perform MIME-sniffing on the response body, potentially causing the response body to be interpreted and displayed as a content type other than the declared content type. Current (early 2014) and legacy versions of Firefox will use the declared content type (if one is set), rather than performing MIME-sniffing.

URL	http://testhtml5.vulnweb.com
Method	GET
Parameter	X-Content-Type-Options
Attack
Evidence
Show / hide Request and Response
Request Header - size: 217 bytes.	GET http://testhtml5.vulnweb.com HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/
Method	GET
Parameter	X-Content-Type-Options
Attack
Evidence
Show / hide Request and Response
Request Header - size: 218 bytes.	GET http://testhtml5.vulnweb.com/ HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/app.js
Method	GET
Parameter	X-Content-Type-Options
Attack
Evidence
Show / hide Request and Response
Request Header - size: 274 bytes.	GET http://testhtml5.vulnweb.com/static/app/app.js HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 324 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: application/javascript Content-Length: 1884 Last-Modified: Tue, 14 May 2013 09:19:07 GMT Connection: keep-alive ETag: "5192018b-75c" Expires: Fri, 13 Jan 2023 06:06:13 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes
Response Body - size: 1,884 bytes.	function getPartialUrl(name) { return "/static/app/partials/" + name + ".html"; } // app initialization var app = angular.module('itemsApp', []); //This configures the routes and associates each route with a view and a controller app.config(function ($routeProvider) { $routeProvider .when('/popular', { controller: 'PopularItemsController', templateUrl: getPartialUrl('popular') }) .when('/popular/page/:page', { controller: 'PopularItemsController', templateUrl: getPartialUrl('popular') }) .when('/redir', { controller: 'SimpleController', templateUrl: getPartialUrl('redir') }) .when('/all/filter/:filter', { controller: 'PopularItemsController', templateUrl: getPartialUrl('popular') }) .when('/latest', { controller: 'LatestItemsController', templateUrl: getPartialUrl('latest') }) .when('/latest/page/:page', { controller: 'LatestItemsController', templateUrl: getPartialUrl('latest') }) .when('/carousel', { controller: 'PopularItemsController', templateUrl: getPartialUrl('carousel') }) .when('/archive', { controller: 'ArchiveItemsController', templateUrl: getPartialUrl('archive') }) .when('/about', { controller: 'SimpleController', templateUrl: getPartialUrl('about') }) .when('/contact', { controller: 'SimpleController', templateUrl: getPartialUrl('contact') }) .otherwise({ redirectTo: '/popular' }); });
URL	http://testhtml5.vulnweb.com/static/app/controllers/controllers.js
Method	GET
Parameter	X-Content-Type-Options
Attack
Evidence
Show / hide Request and Response
Request Header - size: 294 bytes.	GET http://testhtml5.vulnweb.com/static/app/controllers/controllers.js HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 324 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: application/javascript Content-Length: 2582 Last-Modified: Fri, 10 May 2013 10:11:54 GMT Connection: keep-alive ETag: "518cc7ea-a16" Expires: Fri, 13 Jan 2023 06:06:13 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes
Response Body - size: 2,582 bytes.	app.controller('PopularItemsController', function ($scope, $routeParams, itemsService) { $scope.ctrlName = "popular"; $scope.showLoader = showLoader; $scope.hideLoader = hideLoader; $scope.showLoader(); $scope.page = ($routeParams.page) ? parseInt($routeParams.page) : 0; $scope.pageStr = ($routeParams.page) ? $routeParams.page : "0"; $scope.filter = ($routeParams.filter) ? $routeParams.filter : ""; if ($scope.filter) { itemsService.getArchiveItems(function(data, status) { if (status < 200 \|\| status >= 300) return; $scope.items = data; $scope.hideLoader(); }); } else { itemsService.getPopularItems($scope.page, function(data, status) { if (status < 200 \|\| status >= 300) return; $scope.items = data; $scope.hideLoader(); }); } $scope.like = function(id) { itemsService.like(id, function(data, status) { if (status < 200 \|\| status >= 300) return; $scope.response = data; }); }; }); app.controller('LatestItemsController', function ($scope, $routeParams, itemsService) { $scope.ctrlName = "latest"; $scope.showLoader = showLoader; $scope.hideLoader = hideLoader; $scope.showLoader(); $scope.page = ($routeParams.page) ? parseInt($routeParams.page) : 0; $scope.pageStr = ($routeParams.page) ? $routeParams.page : "0"; $scope.filter = ($routeParams.filter) ? $routeParams.filter : ""; itemsService.getLatestItems($scope.page, function(data, status) { if (status < 200 \|\| status >= 300) return; $scope.items = data; $scope.hideLoader(); }); $scope.like = function(id) { itemsService.like(id, function(data, status) { if (status < 200 \|\| status >= 300) return; $scope.response = data; }); }; }); app.controller('ArchiveItemsController', function ($scope, $routeParams, itemsService) { $scope.ctrlName = "archive"; $scope.showLoader = showLoader; $scope.hideLoader = hideLoader; $scope.showLoader(); itemsService.getArchiveItems(function(data, status) { if (status < 200 \|\| status >= 300) return; $scope.items = data; $scope.hideLoader(); }); }); app.controller('SimpleController', function ($scope, itemsService) {});
URL	http://testhtml5.vulnweb.com/static/app/libs/sessvars.js
Method	GET
Parameter	X-Content-Type-Options
Attack
Evidence
Show / hide Request and Response
Request Header - size: 284 bytes.	GET http://testhtml5.vulnweb.com/static/app/libs/sessvars.js HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 325 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: application/javascript Content-Length: 8869 Last-Modified: Tue, 07 May 2013 10:17:48 GMT Connection: keep-alive ETag: "5188d4cc-22a5" Expires: Fri, 13 Jan 2023 06:06:13 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes
Response Body - size: 8,869 bytes.	/* sessvars ver 1.00 - JavaScript based session object copyright 2008 Thomas Frank This EULA grants you the following rights: Installation and Use. You may install and use an unlimited number of copies of the SOFTWARE PRODUCT. Reproduction and Distribution. You may reproduce and distribute an unlimited number of copies of the SOFTWARE PRODUCT either in whole or in part; each copy should include all copyright and trademark notices, and shall be accompanied by a copy of this EULA. Copies of the SOFTWARE PRODUCT may be distributed as a standalone product or included with your own product. Commercial Use. You may sell for profit and freely distribute scripts and/or compiled scripts that were created with the SOFTWARE PRODUCT. */ sessvars=function(){ var x={}; x.$={ prefs:{ memLimit:2000, autoFlush:true, crossDomain:true, includeProtos:false, includeFunctions:true }, parent:x, clearMem:function(){ for(var i in this.parent){if(i!="$"){this.parent[i]=undefined}}; this.flush(); }, usedMem:function(){ x={}; return Math.round(this.flush(x)/1024); }, usedMemPercent:function(){ return Math.round(this.usedMem()/this.prefs.memLimit); }, flush:function(x){ var y,o={},j=this.$$; x=x\|\|top; for(var i in this.parent){o[i]=this.parent[i]}; o.$=this.prefs; j.includeProtos=this.prefs.includeProtos; j.includeFunctions=this.prefs.includeFunctions; y=this.$$.make(o); if(x!=top){return y.length}; if(y.length/1024>this.prefs.memLimit){return false} x.name=y; return true; }, getDomain:function(){ var l=location.href l=l.split("///").join("//"); l=l.substring(l.indexOf("://")+3).split("/")[0]; while(l.split(".").length>2){l=l.substring(l.indexOf(".")+1)}; return l }, debug:function(t){ var t=t\|\|this,a=arguments.callee; if(!document.body){setTimeout(function(){a(t)},200);return}; t.flush(); var d=document.getElementById("sessvarsDebugDiv"); if(!d){d=document.createElement("div");document.body.insertBefore(d,document.body.firstChild)}; d.id="sessvarsDebugDiv"; d.innerHTML='<div style="line-height:20px;padding:5px;font-size:11px;font-family:Verdana,Arial,Helvetica;'+ 'z-index:10000;background:#FFFFCC;border: 1px solid #333;margin-bottom:12px">'+ '<b style="font-family:Trebuchet MS;font-size:20px">sessvars.js - debug info:</b><br/><br/>'+ 'Memory usage: '+t.usedMem()+' Kb ('+t.usedMemPercent()+'%)   '+ '<span style="cursor:pointer"><b>[Clear memory]</b></span><br/>'+ top.name.split('\n').join('<br/>')+'</div>'; d.getElementsByTagName('span')[0].onclick=function(){t.clearMem();location.reload()} }, init:function(){ var o={}, t=this; try {o=this.$$.toObject(top.name)} catch(e){o={}}; this.prefs=o.$\|\|t.prefs; if(this.prefs.crossDomain \|\| this.prefs.currentDomain==this.getDomain()){ for(var i in o){this.parent[i]=o[i]}; } else { this.prefs.currentDomain=this.getDomain(); }; this.parent.$=t; t.flush(); var f=function(){if(t.prefs.autoFlush){t.flush()}}; if(window["addEventListener"]){addEventListener("unload",f,false)} else if(window["attachEvent"]){window.attachEvent("onunload",f)} else {this.prefs.autoFlush=false}; } }; x.$.$$={ compactOutput:false, includeProtos:false, includeFunctions: false, detectCirculars:true, restoreCirculars:true, make:function(arg,restore) { this.restore=restore; this.mem=[];this.pathMem=[]; return this.toJsonStringArray(arg).join(''); }, toObject:function(x){ eval("this.myObj="+x); if(!this.restoreCirculars \|\| !alert){return this.myObj}; if(this.includeFunctions){ var x=this.myObj; for(var i in x){if(typeof x[i]=="string" && !x[i].indexOf("JSONincludedFunc:")){ x[i]=x[i].substring(17); eval("x[i]="+x[i]) }} }; this.restoreCode=[]; this.make(this.myObj,true); var r=this.restoreCode.join(";")+";"; eval('r=r.replace(/\\W([0-9]{1,})(\\W)/g,"[$1]$2").replace(/\\.\\;/g,";")'); eval(r); return this.myObj }, toJsonStringArray:function(arg, out) { if(!out){this.path=[]}; out = out \|\| []; var u; // undefined switch (typeof arg) { case 'object': this.lastObj=arg; if(this.detectCirculars){ var m=this.mem; var n=this.pathMem; for(var i=0;i<m.length;i++){ if(arg===m[i]){ out.push('"JSONcircRef:'+n[i]+'"');return out } }; m.push(arg); n.push(this.path.join(".")); }; if (arg) { if (arg.constructor == Array) { out.push('['); for (var i = 0; i < arg.length; ++i) { this.path.push(i); if (i > 0) out.push(',\n'); this.toJsonStringArray(arg[i], out); this.path.pop(); } out.push(']'); return out; } else if (typeof arg.toString != 'undefined') { out.push('{'); var first = true; for (var i in arg) { if(!this.includeProtos && arg[i]===arg.constructor.prototype[i]){continue}; this.path.push(i); var curr = out.length; if (!first) out.push(this.compactOutput?',':',\n'); this.toJsonStringArray(i, out); out.push(':'); this.toJsonStringArray(arg[i], out); if (out[out.length - 1] == u) out.splice(curr, out.length - curr); else first = false; this.path.pop(); } out.push('}'); return out; } return out; } out.push('null'); return out; case 'unknown': case 'undefined': case 'function': if(!this.includeFunctions){out.push(u);return out}; arg="JSONincludedFunc:"+arg; out.push('"'); var a=['\n','\\n','\r','\\r','"','\\"']; arg+=""; for(var i=0;i<6;i+=2){arg=arg.split(a[i]).join(a[i+1])}; out.push(arg); out.push('"'); return out; case 'string': if(this.restore && arg.indexOf("JSONcircRef:")==0){ this.restoreCode.push('this.myObj.'+this.path.join(".")+"="+arg.split("JSONcircRef:").join("this.myObj.")); }; out.push('"'); var a=['\n','\\n','\r','\\r','"','\\"']; arg+=""; for(var i=0;i<6;i+=2){arg=arg.split(a[i]).join(a[i+1])}; out.push(arg); out.push('"'); return out; default: out.push(String(arg)); return out; } } }; x.$.init(); return x; }()
URL	http://testhtml5.vulnweb.com/static/app/post.js
Method	GET
Parameter	X-Content-Type-Options
Attack
Evidence
Show / hide Request and Response
Request Header - size: 275 bytes.	GET http://testhtml5.vulnweb.com/static/app/post.js HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 324 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: application/javascript Content-Length: 3319 Last-Modified: Fri, 17 May 2013 12:18:21 GMT Connection: keep-alive ETag: "5196200d-cf7" Expires: Fri, 13 Jan 2023 06:06:13 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes
Response Body - size: 3,319 bytes.	// post AngularJs init // modal login form $('#loginFormSubmit').on('click', function(e){ // We don't want this to act as a link so cancel the link action e.preventDefault(); // Find form and submit it $('#loginForm').submit(); }); $('#loginFormForgot').on('click', function(e){ // We don't want this to act as a link so cancel the link action e.preventDefault(); // submit password request $.ajax({ url: "/forgotpw", data: "<forgot><username>" + $('#username').attr("value") + "</username></forgot>", type: 'POST', contentType: "text/xml", dataType: "text", success : function(data){ alert(data + ", your password was changed. You will receive an email with the new password shortly."); }, error : function (xhr, ajaxOptions, thrownError){ console.log(xhr.status); console.log(thrownError); } }); }); // when a nav link is clicked make the link active $('.nav li a').on('click', function(e){ var url = $(this).attr("href"); if (url.indexOf("http://") != 0 && url.indexOf("/admin/") != 0) e.preventDefault(); // prevent link click var $thisLi = $(this).parent('li'); var $ul = $thisLi.parent('ul'); if (!$thisLi.hasClass('active')) { $ul.find('li.active').removeClass('active'); $thisLi.addClass('active'); } }) // loader showLoader = function () { $("#loader").show(); } hideLoader = function () { $("#loader").hide(); } // take care of URL from hash $('.nav li a').each(function(){ var $thisLi = $(this).parent('li'); if ($thisLi.hasClass('active')) $thisLi.removeClass('active'); }) var foundPath = false; $('.nav li a').each(function(){ var $thisLi = $(this).parent('li'); if ($(this).attr("href") == location.hash) { $thisLi.addClass('active'); foundPath = true; } }) if (!foundPath) { $('#popularLi').addClass('active'); } // cookies function getCookie(c_name) { var c_value = document.cookie; var c_start = c_value.indexOf(" " + c_name + "="); if (c_start == -1) { c_start = c_value.indexOf(c_name + "="); } if (c_start == -1) { c_value = null; } else { c_start = c_value.indexOf("=", c_start) + 1; var c_end = c_value.indexOf(";", c_start); if (c_end == -1) { c_end = c_value.length; } c_value = unescape(c_value.substring(c_start,c_end)); } return c_value; } var cookieUsername = getCookie("username"); if (!cookieUsername) cookieUsername = "unknown"; // referrer and sessvars var referrer = "unknown"; if (document.referrer) {referrer = document.referrer;} sessvars.pageCount=sessvars.pageCount\|\|0; sessvars.pageCount++; $("#refId").html(cookieUsername + " is coming from <b>" + referrer + "</b> and has visited this page <b>" + (sessvars.pageCount) + "</b> times."); // facebook var hrf=window.location.href.toLowerCase(); if (hrf !='http://www.facebook.com/') document.write('<div class="fb-comments" data-num-posts="4" data-width="470" data-href="'+window.location.href+'"></div>')
URL	http://testhtml5.vulnweb.com/static/app/services/itemsService.js
Method	GET
Parameter	X-Content-Type-Options
Attack
Evidence
Show / hide Request and Response
Request Header - size: 292 bytes.	GET http://testhtml5.vulnweb.com/static/app/services/itemsService.js HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 323 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: application/javascript Content-Length: 723 Last-Modified: Fri, 10 May 2013 09:00:28 GMT Connection: keep-alive ETag: "518cb72c-2d3" Expires: Fri, 13 Jan 2023 06:06:13 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes
Response Body - size: 723 bytes.	app.service('itemsService', function ($http) { var items_per_page = 5; var items = []; this.getPopularItems = function (page, callback) { var offset = page * items_per_page; $http.get('/ajax/popular?offset=' + offset).success(callback); }; this.getLatestItems = function (page, callback) { var offset = page * items_per_page; $http.get('/ajax/latest?offset=' + offset).success(callback); }; this.getArchiveItems = function (callback) { $http.get('/ajax/archive').success(callback); }; this.like = function (id, callback) { $http.get('/ajax/like?id=' + id).success(callback).error(callback); }; });
URL	http://testhtml5.vulnweb.com/static/css/style.css
Method	GET
Parameter	X-Content-Type-Options
Attack
Evidence
Show / hide Request and Response
Request Header - size: 277 bytes.	GET http://testhtml5.vulnweb.com/static/css/style.css HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 309 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: text/css Content-Length: 570 Last-Modified: Fri, 10 May 2013 09:00:28 GMT Connection: keep-alive ETag: "518cb72c-23a" Expires: Fri, 13 Jan 2023 06:06:13 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes
Response Body - size: 570 bytes.	.screenshot { border: 1px solid #DADADA; } .shadow { box-shadow: 0px 2px 0px 0px #D9D9D9; } .detailsbox { font-family: 'Lora', sans-serif; font-size: 15px; background: #fefefe; margin-bottom: 0px; padding-top: 5px; height: 378px !important; } .detailsboxTitle { font-weight: bold; font-size: large; padding-top: 10px; } .carouselView{ width: 600px; } .archivebox { background: #eeeeee; } .archiveboxinteresting { background: #fff7ec; } body .modal { width: 400px; }
URL	http://testhtml5.vulnweb.com/static/img/logo2.png
Method	GET
Parameter	X-Content-Type-Options
Attack
Evidence
Show / hide Request and Response
Request Header - size: 277 bytes.	GET http://testhtml5.vulnweb.com/static/img/logo2.png HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 311 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: image/png Content-Length: 2736 Last-Modified: Thu, 02 May 2013 14:50:21 GMT Connection: keep-alive ETag: "51827d2d-ab0" Expires: Fri, 13 Jan 2023 06:06:13 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes
Response Body - size: 2,736 bytes.	PNG IHDR«tà¿sRGB®ÎégAMA±üa pHYsÃÃÇo¨dtEXtSoftwarePaint.NET v3.5.100ôr¡ IDAThCímWÇgîËÙew»j±JÚomüP_hLúA?H5¶¾\|0ñ¦IM~c«®Ò » "ÄÅ¸JlXJîfÅíºaÙ{Îív! BÈøÿ{&çÎÎ¹twÉ½;gæÌ9ÏùÿyçÌu?Ùê9ªA¸Jò=!¸ÇT½9ªQ< =qôq¾ÉªÁËËfÏÓVmXAý¨Û &¬Pf zªèÏTE±PÄbKdÞ_¡ò~»ÊWUN´ãX)â²(Æñ ÜslòÅ± n±uXëµV&ðªi³¢NEÿ ó_[+þã¨r\|)ÿøÎC)çQ.sbÀ]À?+ÄLÙâåF¦{ÌÖÚÐúõu¸+@ÍE éùóeÁÿ@ý½rýÁq(ßÅgÖ1]1h·«ÿ]¸Ó<ð±Ö ÀÖá«ÃW+D ÓÇRþ)@útýÀ9R IK@þ&\Ã§}\¶ §µÖ¾® V¬X¬Zµ8wî^s2l2$çx&<,û¨Ë±¤÷ÒòMªá}À»Jý¸jDÖZÍjü7ÁÁÁpÀÛÚÚeËÛ¶meÝÿ^³l3îîîIiëùóç£:uÝñÏÉzÖ{i»´gÿÖfÇ=OæÅÏ ¨ÿªaÙÏrì²e¨ÿdòÖ´FÆ[·ZçÈ#Àí$eåÄÓpñ{Ï¾`Ý¼ysdö§V8²Ás±TÏ@`ô=ø½4eAXKù(íü<2÷«VøÅÅÔÒ êêÕ««W¯ÖÜÑZ 3Ù××a [¹R¤§Äø_¤£ ²Ñ¿_÷gùÉÿ³/C±ÿ ñEÛ,A¬\Î´ ±×®]~¥T000ð¾àß¬æä¡röìu»ê»uX@èGP¿áPGpÍ?dÎÿ_si»Çv?{¥ÝT×Ûð_fÖµk×år9Öv!Þ´iS4kÖ¬ :4Á·%ðÖ[ùÁÚÏ³Áda»öÄIØÆø u~æÎ;£6Ó'¿téRE7lØ8p ³ÁzòäÉÉ¬ßõ³Ï9c}vQ®_¿<x0êï¥?>a._¾ìÙ³gB\|qöìÙèZÓ&¦ ôã¢ËûúúåÀü8RM] » Ï+á=<ìBu¯÷¨jñB)?%þ¹0ÇÊ\|kÈÿ:>Ý°\|¬¤ ¢££#×¼µô{u0ÆO3ð+ÓÍÂJ ®¯XÙ¦+9MYÍ À «mÅïº»wïÎs¢éóÚÅ¢µqãF«]MûÂÅ6lkÜ&qX&Üäî9Pºg¡ÿIL².DôO+i¨¢øx)õ(å±«õ,,ÜÁ°Ü4°Ô5xH½¯3E+ `76g®.#ãêºú¼ÆlêÆ¶Lg)k¼mI°V[?ëÒjhBW4XMuåsòàw³ú97ø`ÓíâýTZ½âÇ¼vçÇAÈYÍ 0ÏÇUßäÄ¿úÓ_ujølD¿ ¾´Öß÷¿qÏñ9ã5(ëPØ(ÿ6þïÇèûâ\|¥Êi°²L/-ÌWÆ ±h¢mFëó]]]!¦@ÇÝUVB s©ºÎ¤AIóYM5$###îA< ÌòYÍú¨ÐI+4]SÉÖ¯_iW¶íÊ²?Ë56XwíÚUÑ_[°R '©!áBàÕIå`bwBþUá×QÏ7,`Þ>t%grx§ feÁj_¼x10g0 ÀÔéÛÚ¦Ó,OJ0A\²îÛ·oW+¬L³}æ²æÊÕ\ÚwìØð`ýTkmGÂÉ¶ÇUv¯@¶«tëJrÌ1 0uvvNXMã¶u t\c¥{åËá§.ÀßXmAT ®ÁËØ{à¾l¶ÿ»p:¥ï}( VÎø-[¶§O1si¢âÊ»¬EYÍ9!²1Ý§Zaå}IÏ\BM{eÁÊk5 &xbLã¾ª~©¬ãPË{ü/®¬YTM6àÆ}Z]/aå& Öa¨àRäbd¿IÙÕE=¯îõ¦?(mÖêù´yiËRL.¼ßôYiv÷ë #ËgË\Ò´ïºX9Aã~ºmó£XãP²níNþ0ÁOtSz{{CÒ¶¦âëHß\ñ=îù\¬tÕÔ÷Vø¬çM¬Êú °ù¸® ¹Ò4e].gxâº_¦¤±ÆUÀ]sm°rÉO®èÃûí6Ùy÷Ê+a³²Y»ffPq;`e÷îÝ ²m+Wk\]÷ïß <Ö¦ªÚVi;æ¶.í 0'B¬ñt m\|9þhóYC%uÅ&Dúáø `}=A]qÿêùx®ïHÉÐ `}LSVlh{{{dTæ1¦âßËÜr 9ß'èéé #XóÚ´<+¯ãõýýýQc]Ì!Ï½°rÐÍIÊ Èf£ja5ÕÕÌyRaõ³lî~7Cç¤i~ø+6uØö¤ì©S§ú+Ç:ns¦ÍÃëö´ ¬¿E´?ÁÓl¨ì(ãÀùv¨®åÝ8ÿCaáYqC ¬e¾¥<ozs·¹eÞm6Èê/ó¬Ï8¾³½#É/âg-Óñ^jÍÜ_/âüäZ_OûêÔVôqÃ´VR}®ÿîÿ&¶x²v7)$Æ»©ÿÕöÕÎ\|D\|»µîlÅ¢WÂ/øæ¿lô¦!©ÿ>Æ¶)>ES©EäJ÷§<«ßky ¾©+ó®GP_Àþ(~öºUmãïëÌ9Ò;¥_Ý§Ô øÂõöWØazKû[8zÖïpîËÒóîªF¿§}L8ê#yW-È¹òÑ;üæÊ_4z-üKtP_T{=ø%³7áÄ~(6ÙJõ 3>Ú8UÚâ@©®øå"yO\|¾çb,ûOa`@¨+[¿VÕ¨¢Qß<ÜÿëÃ±õÍEÀ¨niFú[WSÅ8õvL_8üÏÌ8W6$rIEND®B`
Instances	9
Solution	Ensure that the application/web server sets the Content-Type header appropriately, and that it sets the X-Content-Type-Options header to 'nosniff' for all web pages. If possible, ensure that the end user uses a standards-compliant and modern web browser that does not perform MIME-sniffing at all, or that can be directed by the web application/web server to not perform MIME-sniffing.
Reference	http://msdn.microsoft.com/en-us/library/ie/gg622941%28v=vs.85%29.aspx https://owasp.org/www-community/Security_Headers
Tags	OWASP_2021_A05 OWASP_2017_A06
CWE Id	693
WASC Id	15
Plugin Id	10021

Informational	Cookie Poisoning
Description	This check looks at user-supplied input in query string parameters and POST data to identify where cookie parameters might be controlled. This is called a cookie poisoning attack, and becomes exploitable when an attacker can manipulate the cookie in various ways. In some cases this will not be exploitable, however, allowing URL parameters to set cookie values is generally considered a bug.

URL	http://testhtml5.vulnweb.com/login
Method	POST
Parameter	username
Attack
Evidence
Show / hide Request and Response
Request Header - size: 332 bytes.	POST http://testhtml5.vulnweb.com/login HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Content-Type: application/x-www-form-urlencoded Referer: http://testhtml5.vulnweb.com Content-Length: 27
Request Body - size: 27 bytes.	username=admin&password=ZAP
Response Header - size: 243 bytes.	HTTP/1.1 302 FOUND Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 265 Connection: keep-alive Location: http://testhtml5.vulnweb.com/ Set-Cookie: username=admin; Path=/
Response Body - size: 265 bytes.	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"> <title>Redirecting...</title> <h1>Redirecting...</h1> <p>You should be redirected automatically to target URL: <a href="http://testhtml5.vulnweb.com/">http://testhtml5.vulnweb.com/</a>. If not click the link.
URL	http://testhtml5.vulnweb.com/login
Method	POST
Parameter	username
Attack
Evidence
Show / hide Request and Response
Request Header - size: 504 bytes.	POST http://testhtml5.vulnweb.com/login HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Content-Type: application/x-www-form-urlencoded Content-Length: 32 Origin: http://testhtml5.vulnweb.com Connection: keep-alive Referer: http://testhtml5.vulnweb.com/ Upgrade-Insecure-Requests: 1
Request Body - size: 32 bytes.	username=adminKcvIItkE&password=
Response Header - size: 251 bytes.	HTTP/1.1 302 FOUND Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:07:28 GMT Content-Type: text/html; charset=utf-8 Content-Length: 265 Connection: keep-alive Location: http://testhtml5.vulnweb.com/ Set-Cookie: username=adminKcvIItkE; Path=/
Response Body - size: 265 bytes.	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"> <title>Redirecting...</title> <h1>Redirecting...</h1> <p>You should be redirected automatically to target URL: <a href="http://testhtml5.vulnweb.com/">http://testhtml5.vulnweb.com/</a>. If not click the link.
URL	http://testhtml5.vulnweb.com/login
Method	POST
Parameter	username
Attack
Evidence
Show / hide Request and Response
Request Header - size: 504 bytes.	POST http://testhtml5.vulnweb.com/login HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Content-Type: application/x-www-form-urlencoded Content-Length: 32 Origin: http://testhtml5.vulnweb.com Connection: keep-alive Referer: http://testhtml5.vulnweb.com/ Upgrade-Insecure-Requests: 1
Request Body - size: 32 bytes.	username=adminuUeYtBMy&password=
Response Header - size: 251 bytes.	HTTP/1.1 302 FOUND Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:07:30 GMT Content-Type: text/html; charset=utf-8 Content-Length: 265 Connection: keep-alive Location: http://testhtml5.vulnweb.com/ Set-Cookie: username=adminuUeYtBMy; Path=/
Response Body - size: 265 bytes.	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"> <title>Redirecting...</title> <h1>Redirecting...</h1> <p>You should be redirected automatically to target URL: <a href="http://testhtml5.vulnweb.com/">http://testhtml5.vulnweb.com/</a>. If not click the link.
Instances	3
Solution	Do not allow user input to control cookie names and values. If some query string parameters must be set in cookie values, be sure to filter out semicolon's that can serve as name/value pair delimiters.
Reference	http://websecuritytool.codeplex.com/wikipage?title=Checks#user-controlled-cookie
Tags	OWASP_2021_A03 OWASP_2017_A01
CWE Id	20
WASC Id	20
Plugin Id	10029

Informational	Information Disclosure - Suspicious Comments
Description	The response appears to contain suspicious comments which may help an attacker. Note: Matches made within script blocks or files are against the entire content not only comments.

URL	http://testhtml5.vulnweb.com/static/app/post.js
Method	GET
Parameter
Attack
Evidence	admin
Show / hide Request and Response
Request Header - size: 275 bytes.	GET http://testhtml5.vulnweb.com/static/app/post.js HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 324 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: application/javascript Content-Length: 3319 Last-Modified: Fri, 17 May 2013 12:18:21 GMT Connection: keep-alive ETag: "5196200d-cf7" Expires: Fri, 13 Jan 2023 06:06:13 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes
Response Body - size: 3,319 bytes.	// post AngularJs init // modal login form $('#loginFormSubmit').on('click', function(e){ // We don't want this to act as a link so cancel the link action e.preventDefault(); // Find form and submit it $('#loginForm').submit(); }); $('#loginFormForgot').on('click', function(e){ // We don't want this to act as a link so cancel the link action e.preventDefault(); // submit password request $.ajax({ url: "/forgotpw", data: "<forgot><username>" + $('#username').attr("value") + "</username></forgot>", type: 'POST', contentType: "text/xml", dataType: "text", success : function(data){ alert(data + ", your password was changed. You will receive an email with the new password shortly."); }, error : function (xhr, ajaxOptions, thrownError){ console.log(xhr.status); console.log(thrownError); } }); }); // when a nav link is clicked make the link active $('.nav li a').on('click', function(e){ var url = $(this).attr("href"); if (url.indexOf("http://") != 0 && url.indexOf("/admin/") != 0) e.preventDefault(); // prevent link click var $thisLi = $(this).parent('li'); var $ul = $thisLi.parent('ul'); if (!$thisLi.hasClass('active')) { $ul.find('li.active').removeClass('active'); $thisLi.addClass('active'); } }) // loader showLoader = function () { $("#loader").show(); } hideLoader = function () { $("#loader").hide(); } // take care of URL from hash $('.nav li a').each(function(){ var $thisLi = $(this).parent('li'); if ($thisLi.hasClass('active')) $thisLi.removeClass('active'); }) var foundPath = false; $('.nav li a').each(function(){ var $thisLi = $(this).parent('li'); if ($(this).attr("href") == location.hash) { $thisLi.addClass('active'); foundPath = true; } }) if (!foundPath) { $('#popularLi').addClass('active'); } // cookies function getCookie(c_name) { var c_value = document.cookie; var c_start = c_value.indexOf(" " + c_name + "="); if (c_start == -1) { c_start = c_value.indexOf(c_name + "="); } if (c_start == -1) { c_value = null; } else { c_start = c_value.indexOf("=", c_start) + 1; var c_end = c_value.indexOf(";", c_start); if (c_end == -1) { c_end = c_value.length; } c_value = unescape(c_value.substring(c_start,c_end)); } return c_value; } var cookieUsername = getCookie("username"); if (!cookieUsername) cookieUsername = "unknown"; // referrer and sessvars var referrer = "unknown"; if (document.referrer) {referrer = document.referrer;} sessvars.pageCount=sessvars.pageCount\|\|0; sessvars.pageCount++; $("#refId").html(cookieUsername + " is coming from <b>" + referrer + "</b> and has visited this page <b>" + (sessvars.pageCount) + "</b> times."); // facebook var hrf=window.location.href.toLowerCase(); if (hrf !='http://www.facebook.com/') document.write('<div class="fb-comments" data-num-posts="4" data-width="470" data-href="'+window.location.href+'"></div>')
URL	http://testhtml5.vulnweb.com/static/app/post.js
Method	GET
Parameter
Attack
Evidence	from
Show / hide Request and Response
Request Header - size: 275 bytes.	GET http://testhtml5.vulnweb.com/static/app/post.js HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 324 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: application/javascript Content-Length: 3319 Last-Modified: Fri, 17 May 2013 12:18:21 GMT Connection: keep-alive ETag: "5196200d-cf7" Expires: Fri, 13 Jan 2023 06:06:13 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes
Response Body - size: 3,319 bytes.	// post AngularJs init // modal login form $('#loginFormSubmit').on('click', function(e){ // We don't want this to act as a link so cancel the link action e.preventDefault(); // Find form and submit it $('#loginForm').submit(); }); $('#loginFormForgot').on('click', function(e){ // We don't want this to act as a link so cancel the link action e.preventDefault(); // submit password request $.ajax({ url: "/forgotpw", data: "<forgot><username>" + $('#username').attr("value") + "</username></forgot>", type: 'POST', contentType: "text/xml", dataType: "text", success : function(data){ alert(data + ", your password was changed. You will receive an email with the new password shortly."); }, error : function (xhr, ajaxOptions, thrownError){ console.log(xhr.status); console.log(thrownError); } }); }); // when a nav link is clicked make the link active $('.nav li a').on('click', function(e){ var url = $(this).attr("href"); if (url.indexOf("http://") != 0 && url.indexOf("/admin/") != 0) e.preventDefault(); // prevent link click var $thisLi = $(this).parent('li'); var $ul = $thisLi.parent('ul'); if (!$thisLi.hasClass('active')) { $ul.find('li.active').removeClass('active'); $thisLi.addClass('active'); } }) // loader showLoader = function () { $("#loader").show(); } hideLoader = function () { $("#loader").hide(); } // take care of URL from hash $('.nav li a').each(function(){ var $thisLi = $(this).parent('li'); if ($thisLi.hasClass('active')) $thisLi.removeClass('active'); }) var foundPath = false; $('.nav li a').each(function(){ var $thisLi = $(this).parent('li'); if ($(this).attr("href") == location.hash) { $thisLi.addClass('active'); foundPath = true; } }) if (!foundPath) { $('#popularLi').addClass('active'); } // cookies function getCookie(c_name) { var c_value = document.cookie; var c_start = c_value.indexOf(" " + c_name + "="); if (c_start == -1) { c_start = c_value.indexOf(c_name + "="); } if (c_start == -1) { c_value = null; } else { c_start = c_value.indexOf("=", c_start) + 1; var c_end = c_value.indexOf(";", c_start); if (c_end == -1) { c_end = c_value.length; } c_value = unescape(c_value.substring(c_start,c_end)); } return c_value; } var cookieUsername = getCookie("username"); if (!cookieUsername) cookieUsername = "unknown"; // referrer and sessvars var referrer = "unknown"; if (document.referrer) {referrer = document.referrer;} sessvars.pageCount=sessvars.pageCount\|\|0; sessvars.pageCount++; $("#refId").html(cookieUsername + " is coming from <b>" + referrer + "</b> and has visited this page <b>" + (sessvars.pageCount) + "</b> times."); // facebook var hrf=window.location.href.toLowerCase(); if (hrf !='http://www.facebook.com/') document.write('<div class="fb-comments" data-num-posts="4" data-width="470" data-href="'+window.location.href+'"></div>')
URL	http://testhtml5.vulnweb.com/static/app/post.js
Method	GET
Parameter
Attack
Evidence	username
Show / hide Request and Response
Request Header - size: 275 bytes.	GET http://testhtml5.vulnweb.com/static/app/post.js HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 324 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:13 GMT Content-Type: application/javascript Content-Length: 3319 Last-Modified: Fri, 17 May 2013 12:18:21 GMT Connection: keep-alive ETag: "5196200d-cf7" Expires: Fri, 13 Jan 2023 06:06:13 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes
Response Body - size: 3,319 bytes.	// post AngularJs init // modal login form $('#loginFormSubmit').on('click', function(e){ // We don't want this to act as a link so cancel the link action e.preventDefault(); // Find form and submit it $('#loginForm').submit(); }); $('#loginFormForgot').on('click', function(e){ // We don't want this to act as a link so cancel the link action e.preventDefault(); // submit password request $.ajax({ url: "/forgotpw", data: "<forgot><username>" + $('#username').attr("value") + "</username></forgot>", type: 'POST', contentType: "text/xml", dataType: "text", success : function(data){ alert(data + ", your password was changed. You will receive an email with the new password shortly."); }, error : function (xhr, ajaxOptions, thrownError){ console.log(xhr.status); console.log(thrownError); } }); }); // when a nav link is clicked make the link active $('.nav li a').on('click', function(e){ var url = $(this).attr("href"); if (url.indexOf("http://") != 0 && url.indexOf("/admin/") != 0) e.preventDefault(); // prevent link click var $thisLi = $(this).parent('li'); var $ul = $thisLi.parent('ul'); if (!$thisLi.hasClass('active')) { $ul.find('li.active').removeClass('active'); $thisLi.addClass('active'); } }) // loader showLoader = function () { $("#loader").show(); } hideLoader = function () { $("#loader").hide(); } // take care of URL from hash $('.nav li a').each(function(){ var $thisLi = $(this).parent('li'); if ($thisLi.hasClass('active')) $thisLi.removeClass('active'); }) var foundPath = false; $('.nav li a').each(function(){ var $thisLi = $(this).parent('li'); if ($(this).attr("href") == location.hash) { $thisLi.addClass('active'); foundPath = true; } }) if (!foundPath) { $('#popularLi').addClass('active'); } // cookies function getCookie(c_name) { var c_value = document.cookie; var c_start = c_value.indexOf(" " + c_name + "="); if (c_start == -1) { c_start = c_value.indexOf(c_name + "="); } if (c_start == -1) { c_value = null; } else { c_start = c_value.indexOf("=", c_start) + 1; var c_end = c_value.indexOf(";", c_start); if (c_end == -1) { c_end = c_value.length; } c_value = unescape(c_value.substring(c_start,c_end)); } return c_value; } var cookieUsername = getCookie("username"); if (!cookieUsername) cookieUsername = "unknown"; // referrer and sessvars var referrer = "unknown"; if (document.referrer) {referrer = document.referrer;} sessvars.pageCount=sessvars.pageCount\|\|0; sessvars.pageCount++; $("#refId").html(cookieUsername + " is coming from <b>" + referrer + "</b> and has visited this page <b>" + (sessvars.pageCount) + "</b> times."); // facebook var hrf=window.location.href.toLowerCase(); if (hrf !='http://www.facebook.com/') document.write('<div class="fb-comments" data-num-posts="4" data-width="470" data-href="'+window.location.href+'"></div>')
URL	http://testhtml5.vulnweb.com
Method	GET
Parameter
Attack
Evidence	Username
Show / hide Request and Response
Request Header - size: 217 bytes.	GET http://testhtml5.vulnweb.com HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/
Method	GET
Parameter
Attack
Evidence	Username
Show / hide Request and Response
Request Header - size: 218 bytes.	GET http://testhtml5.vulnweb.com/ HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
Instances	5
Solution	Remove all comments that return information that may help an attacker and fix any underlying problems they refer to.
Reference
Tags	OWASP_2021_A01 OWASP_2017_A03
CWE Id	200
WASC Id	13
Plugin Id	10027

Informational	Modern Web Application
Description	The application appears to be a modern web application. If you need to explore it automatically then the Ajax Spider may well be more effective than the standard one.

URL	http://testhtml5.vulnweb.com
Method	GET
Parameter
Attack
Evidence	<a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a>
Show / hide Request and Response
Request Header - size: 217 bytes.	GET http://testhtml5.vulnweb.com HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/
Method	GET
Parameter
Attack
Evidence	<a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a>
Show / hide Request and Response
Request Header - size: 218 bytes.	GET http://testhtml5.vulnweb.com/ HTTP/1.1 Host: testhtml5.vulnweb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64; rv:105.0esr) Gecko/20010101 Firefox/105.0esr Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:06:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
Instances	2
Solution	This is an informational alert and so no changes are required.
Reference
Tags
CWE Id
WASC Id
Plugin Id	10109

Informational	User Agent Fuzzer
Description	Check for differences in response based on fuzzed User Agent (eg. mobile sites, access as a Search Engine Crawler). Compares the response statuscode and the hashcode of the response body with the original response.

URL	http://testhtml5.vulnweb.com
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4
Evidence
Show / hide Request and Response
Request Header - size: 267 bytes.	GET http://testhtml5.vulnweb.com HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4 Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2924 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 2,924 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> </head> <body> <div style="padding-top: 10px; padding-bottom: 10px;"> <center> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a><br> <a href="#/popular">Popular</a> \| <a href="#/latest">Latest</a> \| <a href="#/archive">Archive</a> \| <a href="#/about">About</a><br> </center> </div> <div class="container-fluid"> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16
Evidence
Show / hide Request and Response
Request Header - size: 272 bytes.	GET http://testhtml5.vulnweb.com HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16 Pragma: no-cache Cache-Control: no-cache
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2924 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 2,924 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> </head> <body> <div style="padding-top: 10px; padding-bottom: 10px;"> <center> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a><br> <a href="#/popular">Popular</a> \| <a href="#/latest">Latest</a> \| <a href="#/archive">Archive</a> \| <a href="#/about">About</a><br> </center> </div> <div class="container-fluid"> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4
Evidence
Show / hide Request and Response
Request Header - size: 479 bytes.	GET http://testhtml5.vulnweb.com/ HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://testhtml5.vulnweb.com/ Connection: keep-alive Cookie: username=adminuUeYtBMy Upgrade-Insecure-Requests: 1
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2924 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 2,924 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> </head> <body> <div style="padding-top: 10px; padding-bottom: 10px;"> <center> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a><br> <a href="#/popular">Popular</a> \| <a href="#/latest">Latest</a> \| <a href="#/archive">Archive</a> \| <a href="#/about">About</a><br> </center> </div> <div class="container-fluid"> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16
Evidence
Show / hide Request and Response
Request Header - size: 484 bytes.	GET http://testhtml5.vulnweb.com/ HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://testhtml5.vulnweb.com/ Connection: keep-alive Cookie: username=adminuUeYtBMy Upgrade-Insecure-Requests: 1
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2924 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 2,924 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> </head> <body> <div style="padding-top: 10px; padding-bottom: 10px;"> <center> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a><br> <a href="#/popular">Popular</a> \| <a href="#/latest">Latest</a> \| <a href="#/archive">Archive</a> \| <a href="#/about">About</a><br> </center> </div> <div class="container-fluid"> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/logout
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Evidence
Show / hide Request and Response
Request Header - size: 399 bytes.	GET http://testhtml5.vulnweb.com/logout HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Referer: http://testhtml5.vulnweb.com/ Cookie: username=adminKcvIItkE Upgrade-Insecure-Requests: 1
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6925 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,925 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> Welcome <b>adminKcvIItkE</b> \| <a href='/logout'>Logout</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/logout
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Evidence
Show / hide Request and Response
Request Header - size: 399 bytes.	GET http://testhtml5.vulnweb.com/logout HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Referer: http://testhtml5.vulnweb.com/ Cookie: username=adminKcvIItkE Upgrade-Insecure-Requests: 1
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6925 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,925 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> Welcome <b>adminKcvIItkE</b> \| <a href='/logout'>Logout</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/logout
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)
Evidence
Show / hide Request and Response
Request Header - size: 399 bytes.	GET http://testhtml5.vulnweb.com/logout HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1) Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Referer: http://testhtml5.vulnweb.com/ Cookie: username=adminKcvIItkE Upgrade-Insecure-Requests: 1
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6925 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,925 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> Welcome <b>adminKcvIItkE</b> \| <a href='/logout'>Logout</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/logout
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko
Evidence
Show / hide Request and Response
Request Header - size: 411 bytes.	GET http://testhtml5.vulnweb.com/logout HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Referer: http://testhtml5.vulnweb.com/ Cookie: username=adminKcvIItkE Upgrade-Insecure-Requests: 1
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6925 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,925 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> Welcome <b>adminKcvIItkE</b> \| <a href='/logout'>Logout</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/logout
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3739.0 Safari/537.36 Edg/75.0.109.0
Evidence
Show / hide Request and Response
Request Header - size: 477 bytes.	GET http://testhtml5.vulnweb.com/logout HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3739.0 Safari/537.36 Edg/75.0.109.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Referer: http://testhtml5.vulnweb.com/ Cookie: username=adminKcvIItkE Upgrade-Insecure-Requests: 1
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6925 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,925 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> Welcome <b>adminKcvIItkE</b> \| <a href='/logout'>Logout</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/logout
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Evidence
Show / hide Request and Response
Request Header - size: 464 bytes.	GET http://testhtml5.vulnweb.com/logout HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Referer: http://testhtml5.vulnweb.com/ Cookie: username=adminKcvIItkE Upgrade-Insecure-Requests: 1
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:09 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6925 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,925 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> Welcome <b>adminKcvIItkE</b> \| <a href='/logout'>Logout</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/logout
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/91.0
Evidence
Show / hide Request and Response
Request Header - size: 427 bytes.	GET http://testhtml5.vulnweb.com/logout HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/91.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Referer: http://testhtml5.vulnweb.com/ Cookie: username=adminKcvIItkE Upgrade-Insecure-Requests: 1
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:09 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6925 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,925 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> Welcome <b>adminKcvIItkE</b> \| <a href='/logout'>Logout</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/logout
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Evidence
Show / hide Request and Response
Request Header - size: 421 bytes.	GET http://testhtml5.vulnweb.com/logout HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Referer: http://testhtml5.vulnweb.com/ Cookie: username=adminKcvIItkE Upgrade-Insecure-Requests: 1
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6925 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,925 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> Welcome <b>adminKcvIItkE</b> \| <a href='/logout'>Logout</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/logout
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)
Evidence
Show / hide Request and Response
Request Header - size: 432 bytes.	GET http://testhtml5.vulnweb.com/logout HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Referer: http://testhtml5.vulnweb.com/ Cookie: username=adminKcvIItkE Upgrade-Insecure-Requests: 1
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:08 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6925 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,925 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> Welcome <b>adminKcvIItkE</b> \| <a href='/logout'>Logout</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/logout
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4
Evidence
Show / hide Request and Response
Request Header - size: 485 bytes.	GET http://testhtml5.vulnweb.com/logout HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Referer: http://testhtml5.vulnweb.com/ Cookie: username=adminKcvIItkE Upgrade-Insecure-Requests: 1
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:08 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2924 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 2,924 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> </head> <body> <div style="padding-top: 10px; padding-bottom: 10px;"> <center> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a><br> <a href="#/popular">Popular</a> \| <a href="#/latest">Latest</a> \| <a href="#/archive">Archive</a> \| <a href="#/about">About</a><br> </center> </div> <div class="container-fluid"> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/logout
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16
Evidence
Show / hide Request and Response
Request Header - size: 490 bytes.	GET http://testhtml5.vulnweb.com/logout HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Referer: http://testhtml5.vulnweb.com/ Cookie: username=adminKcvIItkE Upgrade-Insecure-Requests: 1
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:08 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2924 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 2,924 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> </head> <body> <div style="padding-top: 10px; padding-bottom: 10px;"> <center> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a><br> <a href="#/popular">Popular</a> \| <a href="#/latest">Latest</a> \| <a href="#/archive">Archive</a> \| <a href="#/about">About</a><br> </center> </div> <div class="container-fluid"> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/logout
Method	GET
Parameter	Header User-Agent
Attack	msnbot/1.1 (+http://search.msn.com/msnbot.htm)
Evidence
Show / hide Request and Response
Request Header - size: 395 bytes.	GET http://testhtml5.vulnweb.com/logout HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: msnbot/1.1 (+http://search.msn.com/msnbot.htm) Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Referer: http://testhtml5.vulnweb.com/ Cookie: username=adminKcvIItkE Upgrade-Insecure-Requests: 1
Request Body - size: 0 bytes.
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:08 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6925 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,925 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> Welcome <b>adminKcvIItkE</b> \| <a href='/logout'>Logout</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Evidence
Show / hide Request and Response
Request Header - size: 231 bytes.	GET http://testhtml5.vulnweb.com/static/app HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:10 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Evidence
Show / hide Request and Response
Request Header - size: 231 bytes.	GET http://testhtml5.vulnweb.com/static/app HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:10 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)
Evidence
Show / hide Request and Response
Request Header - size: 231 bytes.	GET http://testhtml5.vulnweb.com/static/app HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:10 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko
Evidence
Show / hide Request and Response
Request Header - size: 243 bytes.	GET http://testhtml5.vulnweb.com/static/app HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:10 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3739.0 Safari/537.36 Edg/75.0.109.0
Evidence
Show / hide Request and Response
Request Header - size: 309 bytes.	GET http://testhtml5.vulnweb.com/static/app HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3739.0 Safari/537.36 Edg/75.0.109.0 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:11 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Evidence
Show / hide Request and Response
Request Header - size: 296 bytes.	GET http://testhtml5.vulnweb.com/static/app HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:12 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/91.0
Evidence
Show / hide Request and Response
Request Header - size: 259 bytes.	GET http://testhtml5.vulnweb.com/static/app HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/91.0 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:12 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Evidence
Show / hide Request and Response
Request Header - size: 253 bytes.	GET http://testhtml5.vulnweb.com/static/app HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:11 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)
Evidence
Show / hide Request and Response
Request Header - size: 264 bytes.	GET http://testhtml5.vulnweb.com/static/app HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:11 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4
Evidence
Show / hide Request and Response
Request Header - size: 317 bytes.	GET http://testhtml5.vulnweb.com/static/app HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:12 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16
Evidence
Show / hide Request and Response
Request Header - size: 322 bytes.	GET http://testhtml5.vulnweb.com/static/app HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:12 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app
Method	GET
Parameter	Header User-Agent
Attack	msnbot/1.1 (+http://search.msn.com/msnbot.htm)
Evidence
Show / hide Request and Response
Request Header - size: 227 bytes.	GET http://testhtml5.vulnweb.com/static/app HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: msnbot/1.1 (+http://search.msn.com/msnbot.htm) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:11 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/controllers
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Evidence
Show / hide Request and Response
Request Header - size: 243 bytes.	GET http://testhtml5.vulnweb.com/static/app/controllers HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:13 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app/controllers
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Evidence
Show / hide Request and Response
Request Header - size: 243 bytes.	GET http://testhtml5.vulnweb.com/static/app/controllers HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:12 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app/controllers
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)
Evidence
Show / hide Request and Response
Request Header - size: 243 bytes.	GET http://testhtml5.vulnweb.com/static/app/controllers HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:12 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app/controllers
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko
Evidence
Show / hide Request and Response
Request Header - size: 255 bytes.	GET http://testhtml5.vulnweb.com/static/app/controllers HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:13 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/controllers
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3739.0 Safari/537.36 Edg/75.0.109.0
Evidence
Show / hide Request and Response
Request Header - size: 321 bytes.	GET http://testhtml5.vulnweb.com/static/app/controllers HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3739.0 Safari/537.36 Edg/75.0.109.0 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:13 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app/controllers
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Evidence
Show / hide Request and Response
Request Header - size: 308 bytes.	GET http://testhtml5.vulnweb.com/static/app/controllers HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:14 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app/controllers
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/91.0
Evidence
Show / hide Request and Response
Request Header - size: 271 bytes.	GET http://testhtml5.vulnweb.com/static/app/controllers HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/91.0 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:14 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/controllers
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Evidence
Show / hide Request and Response
Request Header - size: 265 bytes.	GET http://testhtml5.vulnweb.com/static/app/controllers HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:13 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/controllers
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)
Evidence
Show / hide Request and Response
Request Header - size: 276 bytes.	GET http://testhtml5.vulnweb.com/static/app/controllers HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:14 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/controllers
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4
Evidence
Show / hide Request and Response
Request Header - size: 329 bytes.	GET http://testhtml5.vulnweb.com/static/app/controllers HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:14 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/controllers
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16
Evidence
Show / hide Request and Response
Request Header - size: 334 bytes.	GET http://testhtml5.vulnweb.com/static/app/controllers HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:14 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/controllers
Method	GET
Parameter	Header User-Agent
Attack	msnbot/1.1 (+http://search.msn.com/msnbot.htm)
Evidence
Show / hide Request and Response
Request Header - size: 239 bytes.	GET http://testhtml5.vulnweb.com/static/app/controllers HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: msnbot/1.1 (+http://search.msn.com/msnbot.htm) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:13 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/libs
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Evidence
Show / hide Request and Response
Request Header - size: 236 bytes.	GET http://testhtml5.vulnweb.com/static/app/libs HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:14 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app/libs
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Evidence
Show / hide Request and Response
Request Header - size: 236 bytes.	GET http://testhtml5.vulnweb.com/static/app/libs HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:14 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app/libs
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)
Evidence
Show / hide Request and Response
Request Header - size: 236 bytes.	GET http://testhtml5.vulnweb.com/static/app/libs HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:14 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app/libs
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko
Evidence
Show / hide Request and Response
Request Header - size: 248 bytes.	GET http://testhtml5.vulnweb.com/static/app/libs HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:15 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/libs
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3739.0 Safari/537.36 Edg/75.0.109.0
Evidence
Show / hide Request and Response
Request Header - size: 314 bytes.	GET http://testhtml5.vulnweb.com/static/app/libs HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3739.0 Safari/537.36 Edg/75.0.109.0 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:15 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app/libs
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Evidence
Show / hide Request and Response
Request Header - size: 301 bytes.	GET http://testhtml5.vulnweb.com/static/app/libs HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:16 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app/libs
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/91.0
Evidence
Show / hide Request and Response
Request Header - size: 264 bytes.	GET http://testhtml5.vulnweb.com/static/app/libs HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/91.0 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:16 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/libs
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Evidence
Show / hide Request and Response
Request Header - size: 258 bytes.	GET http://testhtml5.vulnweb.com/static/app/libs HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:15 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/libs
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)
Evidence
Show / hide Request and Response
Request Header - size: 269 bytes.	GET http://testhtml5.vulnweb.com/static/app/libs HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:15 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/libs
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4
Evidence
Show / hide Request and Response
Request Header - size: 322 bytes.	GET http://testhtml5.vulnweb.com/static/app/libs HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:16 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/libs
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16
Evidence
Show / hide Request and Response
Request Header - size: 327 bytes.	GET http://testhtml5.vulnweb.com/static/app/libs HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:16 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/libs
Method	GET
Parameter	Header User-Agent
Attack	msnbot/1.1 (+http://search.msn.com/msnbot.htm)
Evidence
Show / hide Request and Response
Request Header - size: 232 bytes.	GET http://testhtml5.vulnweb.com/static/app/libs HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: msnbot/1.1 (+http://search.msn.com/msnbot.htm) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:15 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/services
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Evidence
Show / hide Request and Response
Request Header - size: 240 bytes.	GET http://testhtml5.vulnweb.com/static/app/services HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:17 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app/services
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Evidence
Show / hide Request and Response
Request Header - size: 240 bytes.	GET http://testhtml5.vulnweb.com/static/app/services HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:17 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app/services
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)
Evidence
Show / hide Request and Response
Request Header - size: 240 bytes.	GET http://testhtml5.vulnweb.com/static/app/services HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:17 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app/services
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko
Evidence
Show / hide Request and Response
Request Header - size: 252 bytes.	GET http://testhtml5.vulnweb.com/static/app/services HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:17 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/services
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3739.0 Safari/537.36 Edg/75.0.109.0
Evidence
Show / hide Request and Response
Request Header - size: 318 bytes.	GET http://testhtml5.vulnweb.com/static/app/services HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3739.0 Safari/537.36 Edg/75.0.109.0 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:18 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app/services
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Evidence
Show / hide Request and Response
Request Header - size: 305 bytes.	GET http://testhtml5.vulnweb.com/static/app/services HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:19 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/app/services
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/91.0
Evidence
Show / hide Request and Response
Request Header - size: 268 bytes.	GET http://testhtml5.vulnweb.com/static/app/services HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/91.0 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:19 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/services
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Evidence
Show / hide Request and Response
Request Header - size: 262 bytes.	GET http://testhtml5.vulnweb.com/static/app/services HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:18 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/services
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)
Evidence
Show / hide Request and Response
Request Header - size: 273 bytes.	GET http://testhtml5.vulnweb.com/static/app/services HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:18 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/services
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4
Evidence
Show / hide Request and Response
Request Header - size: 326 bytes.	GET http://testhtml5.vulnweb.com/static/app/services HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:19 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/services
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16
Evidence
Show / hide Request and Response
Request Header - size: 331 bytes.	GET http://testhtml5.vulnweb.com/static/app/services HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:19 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/app/services
Method	GET
Parameter	Header User-Agent
Attack	msnbot/1.1 (+http://search.msn.com/msnbot.htm)
Evidence
Show / hide Request and Response
Request Header - size: 236 bytes.	GET http://testhtml5.vulnweb.com/static/app/services HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: msnbot/1.1 (+http://search.msn.com/msnbot.htm) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:18 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/css
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Evidence
Show / hide Request and Response
Request Header - size: 231 bytes.	GET http://testhtml5.vulnweb.com/static/css HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:20 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/css
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Evidence
Show / hide Request and Response
Request Header - size: 231 bytes.	GET http://testhtml5.vulnweb.com/static/css HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:20 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/css
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)
Evidence
Show / hide Request and Response
Request Header - size: 231 bytes.	GET http://testhtml5.vulnweb.com/static/css HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:19 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/css
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko
Evidence
Show / hide Request and Response
Request Header - size: 243 bytes.	GET http://testhtml5.vulnweb.com/static/css HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:20 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/css
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3739.0 Safari/537.36 Edg/75.0.109.0
Evidence
Show / hide Request and Response
Request Header - size: 309 bytes.	GET http://testhtml5.vulnweb.com/static/css HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3739.0 Safari/537.36 Edg/75.0.109.0 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:20 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/css
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Evidence
Show / hide Request and Response
Request Header - size: 296 bytes.	GET http://testhtml5.vulnweb.com/static/css HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:22 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/css
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/91.0
Evidence
Show / hide Request and Response
Request Header - size: 259 bytes.	GET http://testhtml5.vulnweb.com/static/css HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/91.0 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:22 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/css
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Evidence
Show / hide Request and Response
Request Header - size: 253 bytes.	GET http://testhtml5.vulnweb.com/static/css HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:20 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/css
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)
Evidence
Show / hide Request and Response
Request Header - size: 264 bytes.	GET http://testhtml5.vulnweb.com/static/css HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:21 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/css
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4
Evidence
Show / hide Request and Response
Request Header - size: 317 bytes.	GET http://testhtml5.vulnweb.com/static/css HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:21 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/css
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16
Evidence
Show / hide Request and Response
Request Header - size: 322 bytes.	GET http://testhtml5.vulnweb.com/static/css HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:21 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/css
Method	GET
Parameter	Header User-Agent
Attack	msnbot/1.1 (+http://search.msn.com/msnbot.htm)
Evidence
Show / hide Request and Response
Request Header - size: 227 bytes.	GET http://testhtml5.vulnweb.com/static/css HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: msnbot/1.1 (+http://search.msn.com/msnbot.htm) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:21 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/img
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Evidence
Show / hide Request and Response
Request Header - size: 231 bytes.	GET http://testhtml5.vulnweb.com/static/img HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:21 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/img
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Evidence
Show / hide Request and Response
Request Header - size: 231 bytes.	GET http://testhtml5.vulnweb.com/static/img HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:21 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/img
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)
Evidence
Show / hide Request and Response
Request Header - size: 231 bytes.	GET http://testhtml5.vulnweb.com/static/img HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:21 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/img
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko
Evidence
Show / hide Request and Response
Request Header - size: 243 bytes.	GET http://testhtml5.vulnweb.com/static/img HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:21 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/img
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3739.0 Safari/537.36 Edg/75.0.109.0
Evidence
Show / hide Request and Response
Request Header - size: 309 bytes.	GET http://testhtml5.vulnweb.com/static/img HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3739.0 Safari/537.36 Edg/75.0.109.0 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:22 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/img
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Evidence
Show / hide Request and Response
Request Header - size: 296 bytes.	GET http://testhtml5.vulnweb.com/static/img HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:23 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive
Response Body - size: 555 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
URL	http://testhtml5.vulnweb.com/static/img
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/91.0
Evidence
Show / hide Request and Response
Request Header - size: 259 bytes.	GET http://testhtml5.vulnweb.com/static/img HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/91.0 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:23 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/img
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Evidence
Show / hide Request and Response
Request Header - size: 253 bytes.	GET http://testhtml5.vulnweb.com/static/img HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:22 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/img
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)
Evidence
Show / hide Request and Response
Request Header - size: 264 bytes.	GET http://testhtml5.vulnweb.com/static/img HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:22 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/img
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4
Evidence
Show / hide Request and Response
Request Header - size: 317 bytes.	GET http://testhtml5.vulnweb.com/static/img HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:23 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/img
Method	GET
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16
Evidence
Show / hide Request and Response
Request Header - size: 322 bytes.	GET http://testhtml5.vulnweb.com/static/img HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16 Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:23 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/static/img
Method	GET
Parameter	Header User-Agent
Attack	msnbot/1.1 (+http://search.msn.com/msnbot.htm)
Evidence
Show / hide Request and Response
Request Header - size: 227 bytes.	GET http://testhtml5.vulnweb.com/static/img HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: msnbot/1.1 (+http://search.msn.com/msnbot.htm) Pragma: no-cache Cache-Control: no-cache Referer: http://testhtml5.vulnweb.com
Request Body - size: 0 bytes.
Response Header - size: 155 bytes.	HTTP/1.1 403 Forbidden Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:22 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive
Response Body - size: 153 bytes.	<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> <hr><center>nginx/1.19.0</center> </body> </html>
URL	http://testhtml5.vulnweb.com/login
Method	POST
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Evidence
Show / hide Request and Response
Request Header - size: 296 bytes.	POST http://testhtml5.vulnweb.com/login HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Pragma: no-cache Cache-Control: no-cache Content-Type: application/x-www-form-urlencoded Referer: http://testhtml5.vulnweb.com Content-Length: 27
Request Body - size: 27 bytes.	username=admin&password=ZAP
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:04 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/login
Method	POST
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Evidence
Show / hide Request and Response
Request Header - size: 296 bytes.	POST http://testhtml5.vulnweb.com/login HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Pragma: no-cache Cache-Control: no-cache Content-Type: application/x-www-form-urlencoded Referer: http://testhtml5.vulnweb.com Content-Length: 27
Request Body - size: 27 bytes.	username=admin&password=ZAP
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:04 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/login
Method	POST
Parameter	Header User-Agent
Attack	Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)
Evidence
Show / hide Request and Response
Request Header - size: 296 bytes.	POST http://testhtml5.vulnweb.com/login HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1) Pragma: no-cache Cache-Control: no-cache Content-Type: application/x-www-form-urlencoded Referer: http://testhtml5.vulnweb.com Content-Length: 27
Request Body - size: 27 bytes.	username=admin&password=ZAP
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:04 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/login
Method	POST
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko
Evidence
Show / hide Request and Response
Request Header - size: 308 bytes.	POST http://testhtml5.vulnweb.com/login HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko Pragma: no-cache Cache-Control: no-cache Content-Type: application/x-www-form-urlencoded Referer: http://testhtml5.vulnweb.com Content-Length: 27
Request Body - size: 27 bytes.	username=admin&password=ZAP
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/login
Method	POST
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3739.0 Safari/537.36 Edg/75.0.109.0
Evidence
Show / hide Request and Response
Request Header - size: 374 bytes.	POST http://testhtml5.vulnweb.com/login HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3739.0 Safari/537.36 Edg/75.0.109.0 Pragma: no-cache Cache-Control: no-cache Content-Type: application/x-www-form-urlencoded Referer: http://testhtml5.vulnweb.com Content-Length: 27
Request Body - size: 27 bytes.	username=admin&password=ZAP
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/login
Method	POST
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Evidence
Show / hide Request and Response
Request Header - size: 361 bytes.	POST http://testhtml5.vulnweb.com/login HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Pragma: no-cache Cache-Control: no-cache Content-Type: application/x-www-form-urlencoded Referer: http://testhtml5.vulnweb.com Content-Length: 27
Request Body - size: 27 bytes.	username=admin&password=ZAP
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/login
Method	POST
Parameter	Header User-Agent
Attack	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/91.0
Evidence
Show / hide Request and Response
Request Header - size: 324 bytes.	POST http://testhtml5.vulnweb.com/login HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/91.0 Pragma: no-cache Cache-Control: no-cache Content-Type: application/x-www-form-urlencoded Referer: http://testhtml5.vulnweb.com Content-Length: 27
Request Body - size: 27 bytes.	username=admin&password=ZAP
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/login
Method	POST
Parameter	Header User-Agent
Attack	Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Evidence
Show / hide Request and Response
Request Header - size: 318 bytes.	POST http://testhtml5.vulnweb.com/login HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) Pragma: no-cache Cache-Control: no-cache Content-Type: application/x-www-form-urlencoded Referer: http://testhtml5.vulnweb.com Content-Length: 27
Request Body - size: 27 bytes.	username=admin&password=ZAP
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/login
Method	POST
Parameter	Header User-Agent
Attack	Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)
Evidence
Show / hide Request and Response
Request Header - size: 329 bytes.	POST http://testhtml5.vulnweb.com/login HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) Pragma: no-cache Cache-Control: no-cache Content-Type: application/x-www-form-urlencoded Referer: http://testhtml5.vulnweb.com Content-Length: 27
Request Body - size: 27 bytes.	username=admin&password=ZAP
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/login
Method	POST
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4
Evidence
Show / hide Request and Response
Request Header - size: 382 bytes.	POST http://testhtml5.vulnweb.com/login HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4 Pragma: no-cache Cache-Control: no-cache Content-Type: application/x-www-form-urlencoded Referer: http://testhtml5.vulnweb.com Content-Length: 27
Request Body - size: 27 bytes.	username=admin&password=ZAP
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2924 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 2,924 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> </head> <body> <div style="padding-top: 10px; padding-bottom: 10px;"> <center> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a><br> <a href="#/popular">Popular</a> \| <a href="#/latest">Latest</a> \| <a href="#/archive">Archive</a> \| <a href="#/about">About</a><br> </center> </div> <div class="container-fluid"> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/login
Method	POST
Parameter	Header User-Agent
Attack	Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16
Evidence
Show / hide Request and Response
Request Header - size: 387 bytes.	POST http://testhtml5.vulnweb.com/login HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16 Pragma: no-cache Cache-Control: no-cache Content-Type: application/x-www-form-urlencoded Referer: http://testhtml5.vulnweb.com Content-Length: 27
Request Body - size: 27 bytes.	username=admin&password=ZAP
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2924 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 2,924 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> </head> <body> <div style="padding-top: 10px; padding-bottom: 10px;"> <center> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a><br> <a href="#/popular">Popular</a> \| <a href="#/latest">Latest</a> \| <a href="#/archive">Archive</a> \| <a href="#/about">About</a><br> </center> </div> <div class="container-fluid"> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> </body> </html>
URL	http://testhtml5.vulnweb.com/login
Method	POST
Parameter	Header User-Agent
Attack	msnbot/1.1 (+http://search.msn.com/msnbot.htm)
Evidence
Show / hide Request and Response
Request Header - size: 292 bytes.	POST http://testhtml5.vulnweb.com/login HTTP/1.1 Host: testhtml5.vulnweb.com user-agent: msnbot/1.1 (+http://search.msn.com/msnbot.htm) Pragma: no-cache Cache-Control: no-cache Content-Type: application/x-www-form-urlencoded Referer: http://testhtml5.vulnweb.com Content-Length: 27
Request Body - size: 27 bytes.	username=admin&password=ZAP
Response Header - size: 196 bytes.	HTTP/1.1 200 OK Server: nginx/1.19.0 Date: Wed, 14 Dec 2022 06:11:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6940 Connection: keep-alive Access-Control-Allow-Origin: *
Response Body - size: 6,940 bytes.	<!DOCTYPE html> <html lang="en" xmlns="http://www.w3.org/1999/html" data-ng-app="itemsApp"> <head> <meta charset="utf-8"> <title>SecurityTweets - HTML5 test website for Acunetix Web Vulnerability Scanner</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content=""> <meta name="author" content=""> <!-- Le styles --> <link href="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet"> <link href='http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'> <link href="/static/css/style.css" rel="stylesheet"> <link rel="icon" type="image/png" href="http://www.acunetix.com/favicon.ico"> <style type="text/css"> body { padding-top: 60px; padding-bottom: 40px; } .sidebar-nav { padding: 9px 0; } @media (max-width: 980px) { /* Enable use of floated navbar text */ .navbar-text.pull-right { float: none; padding-left: 5px; padding-right: 5px; } } </style> </head> <body> <div class="navbar navbar-fixed-top"> <div class="navbar-inner"> <div class="container-fluid"> <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="brand" href="https://www.acunetix.com/"><img src="/static/img/logo2.png" alt="Acunetix website security">    </a> <p class="navbar-text pull-left"> Vulnerable HTML5 test website for <a href="https://www.acunetix.com/vulnerability-scanner/">Acunetix Web Vulnerability Scanner</a>. </p> <p class="navbar-text pull-right"> <a href="#myModal" role="button" class="btn" data-toggle="modal">Login</a> </p> </div> </div> </div> <div class="container-fluid"> <div class="row-fluid"> <div class="span2"> <div class="well sidebar-nav"> <ul class="nav nav-list"> <li class="nav-header">Views</li> <li id="popularLi" class="active"><a href="#/popular">Popular</a></li> <li><a href="#/latest">Latest</a></li> <li><a href="#/carousel">Carousel</a></li> <li><a href="#/archive">Archive</a></li> <li class="nav-header">Website</li> <li><a href="#/about">About</a></li> <li><a href="#/contact">Contact</a></li> <li class="nav-header">Acunetix</li> <li><a target="_blank" href="http://www.acunetix.com/">Website</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/html5-website-security/">HTML5 scanner</a></li> <li><a target="_blank" href="http://www.acunetix.com/vulnerability-scanner/crawling-html5-javascript-websites/">HTML5 vuln help</a></li> <li><a target="_blank" href="http://www.acunetix.com/blog/">Blog</a></li> <li><a target="_blank" href="http://www.facebook.com/Acunetix">Facebook</a></li> <li><a target="_blank" href="http://www.twitter.com/acunetix/">Twitter</a></li> </ul> </div><!--/.well --> </div><!--/span--> <div class="span10"> <div class="row-fluid"> <div ng-view></div> </div><!--/row--> </div><!--/span--> </div><!--/row--> <hr> <div class="row-fluid"> <div class="pull-left" style="font-size: xx-small;" id="refId"></div> </div> <div style="background-color:lightgray;width:100%;text-align:center;font-size:14px"> <p style="padding-left:20%;padding-right:20%"><b>Warning</b>: This is an HTML5 application that is vulnerable by design. This is not a real collection of tweets. This application was created so that you can test your Acunetix, other tools, or your manual penetration testing skills. The application code is prone to attacks such as Cross-site Scripting (XSS) and XML External Entity (XXE). Links presented on this site have no affiliation to the site and are here only as samples.</p> </div> <footer> <p class="pull-left">© Acunetix Ltd. 2019</p> </footer> </div><!--/.fluid-container--> <!-- Modal --> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <form class="modal-body" action="/login" method="POST" id="loginForm"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Login</h3> </div> <div class="modal-body"> <div class="control-group"> <!-- Username --> <label class="control-label" for="username">Username</label> <div class="controls"> <input type="text" id="username" name="username" placeholder="" class="input-xlarge" value="admin"> </div> </div> <div class="control-group"> <!-- Password--> <label class="control-label" for="password">Password</label> <div class="controls"> <input type="password" id="password" name="password" placeholder="" class="input-xlarge"> </div> </div> <div class="control-group"> <a href="#" class="btn" id="loginFormForgot">Forgot Pwd?</a> </div> </div> <div class="modal-footer"> <button class="btn btn-primary" id="loginFormSubmit">Login</button> <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button> </div> </form> </div> <!-- Le javascript ================================================== --> <!-- Placed at the end of the document so the pages load faster --> <script src="http://code.jquery.com/jquery-1.9.1.min.js"></script> <script src="http://netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/js/bootstrap.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.0.6/angular.min.js"></script> <!-- App libs --> <script src="/static/app/app.js"></script> <script src="/static/app/libs/sessvars.js"></script> <script src="/static/app/post.js"></script> <script src="/static/app/controllers/controllers.js"></script> <script src="/static/app/services/itemsService.js"></script> <script src="http://bxss.s3.amazonaws.com/ad.js"></script> </body> </html>
Instances	100
Solution
Reference	https://owasp.org/wstg
Tags
CWE Id
WASC Id
Plugin Id	10104

REPORT

Generated on Wed, 14 Dec 2022 00:12:01

Summary of Alerts

Alerts

Passing Rules

Sites

http://testhtml5.vulnweb.com

No Authentication Statistics Found

Alert Detail