TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Show HN: "Network diff” detects new scripts or data exfiltration on websites

13 点作者 bluepeter将近 6 年前

1 comment

bluepeter将近 6 年前
Let me know if all y&#x27;all have any questions! Fluxguard provides web change monitoring and alerts. We take screenshots, fully render the DOM... and we alert you to any DOM, pixel, or text changes.<p>Our new &quot;network diff&quot; feature goes one step further.<p>It creates a HAR file for all network activity on any page (including for complex form submission pages such as shopping carts). We repeatedly crawl this page (or sequences of pages). And we look for changes to network activity.<p>This way, you can catch and alert any new XHR, image, script, or other resource activity on any page of your site.<p>You can use whitelists to exclude certain domains from analysis (e.g., google.com). Lot of other config options let you further reduce false positives.<p>Why&#x27;d you want to do this?<p>Magecart and other hacking groups use cross-site scripting, poisoned NPM modules, DNS spoofing, and so many other attacks to exfiltrate data from Magento and other CMS.<p>It&#x27;s hard to stop these guys as they are adept at covering their tracks. Edge protection systems aren&#x27;t great if the attacker is coming &quot;from inside the house.&quot;<p>Our new network diff crawls your live site repeatedly. We orchestrate common user journeys -- creating an account, ordering a product -- and we look for any network activity that shouldn&#x27;t be there.<p>Cool, eh?<p>(Sorry for the wall of text.)