[TFWHEZ]

n this tutorial, I'm gonna cover how to use this badass tool to detect XSS and pwn those vulnerabilities.

First off, you gotta have PYTHON installed on any operating system.

Next, you gotta download the GITUB repo: https://github.com/s0md3v/XSStrike

Once you've done that and you've got some pages to test, fire it up like this:

\XSStrike-master\XSStrike-master>python xsstrike.py

Now that you've got a spot to test it out, you can launch a simple attack like so:

python xsstrike.py -u   https://www.xsswith.com/?'REFLECTION HERE '=1

This program will run the payloads that'll hit the reflection, and if it's not vulnerable, it'll tell you why.

This tool is straight fire, big time.

Drop a like, leeching is a big no-no