Security Testing is a tool for locating XSS, CSRF and SQL Injection vulnerabilities in Drupal contributed modules. This tool will scan the source code of contributed module(s) for vulnerabilities and display warnings. It also tries to exploit XSS vulnerability using SimpleTest module by injecting random data into database fields and checking if any injected data will be displayed without being sanitized first. It tries to exploit CSRF using SimpleTest by visiting each link of the contributed module and checking if any insert, update or delete query is executed.
Installation and Usage
This module should not be run on a production site.
1). Enable the module /admin/modules.
2). For scanning the source code of the contributed module, visit the configuration page admin/config/development/security_testing.
3) Enter the location of the directory containing the source code of the contributed module to be scanned in the text box and click on the "Start scanning" button.
You can also scan the module using Drush command :
drush sec-test name_of_the_directory_containing_source_code_of_module
Overlay theme is a small module that provides an option to set the theme of modal frames provided by the core Overlay module, different from the default which is the Administration theme.