InfraGuard

Detection rule: Cross-site Scripting

Script tags, event handlers and cookie-access payloads.

WarningWeb Attack PatternsNginx

What it detects

Script tags, event handlers and cookie-access payloads.

Why it fires

XSS attempts aiming at session theft or phishing.

Worst case

Session theft

Track these versions on your own servers

InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.

Weekly exploited-vulnerability digest

The KEV additions that matter for self-hosted servers, once a week. No other mail.