Categories

Finds common low severity vulnerabilities in websites. This is done by analyzing cookies, server response headers, and local storage.

This Add-on is intended for penetration testers and developers who want an easy way to identify vulnerabilities in their website. Vuln Finder reports vulnerabilities found in cookies, server response headers, and local storage.

Vuln Finder parses the cookies of the current tab and reports any cookies without the secure flag or http only flag. It sends a GET request to the URL in the current tab and then parses the server response headers. Missing security headers and headers with server version information are reported. Lastly, if the site uses local storage then the contents of local storage are also reported.

Tags: security