validation

XSS using quirky implementations of ACME http-01

Some hosting providers implemented http-01 having one part of the challenge key reflected in the response. This resulted in a huge amount of websites being vulnerable to XSS just because of their quirky implementation of the http-01 ACME-challenge.

September 04, 2018

Read article

Crowdsource

Detectify Validation Specification

For us to be able to scan your domain, you need to specify an authorization token and attach it to your domain. You’ll receive one such token when you’re trying to add a new domain from the Detectify dashboard.

May 14, 2014