Temporary Advertisements:
Ad
Ad
Ad
Python Based Automated XSS Testing Tool
by Loki - Thursday July 25, 2024 at 07:54 PM
#1
Features
  • Comprehensive Scanning: Tests URL parameters, POST parameters, headers, and DOM content for XSS vulnerabilities.
  • Multiple Browser Support: Compatible with both Firefox and Chrome for testing.
  • Headless Mode: Option to run scans in headless browser mode for faster & traditional execution.
  • Paralellised Scanning: Utilises multi-threading for efficient scanning of multiple targets.
  • Customizable: Supports custom headers, cookies, and payload files.
  • Crawling Capability: Can crawl websites to discover and test additional pages.
  • Detailed Reporting: Provides comprehensive output with color-coded console logs and optional file output.
  • DOM XSS Detection: Advanced detection of DOM-based XSS vulnerabilities.
  • Payload Customization: Automatically customises payloads with unique identifiers for accurate detection.
  • Tamper Techniques: WAF evasion techniques
  • Detection of SQLi: Validates whether SQLi is also indicative within responses
  • WAF Detection: The ability to detect a firewall running on a target, using behavioural and static checks

Hidden Content
You must register or login to view this content.
Reply
#2
(Jul 25, 2024, 08:02 PM)PangPang Wrote: How reliable is it?

Its fairly reliable in my experience. why don't u try and find out?
Reply
#3
let's put em to rest
Reply
#4
(Jul 25, 2024, 07:54 PM)Lokie Wrote:
Features
  • Comprehensive Scanning: Tests URL parameters, POST parameters, headers, and DOM content for XSS vulnerabilities.
  • Multiple Browser Support: Compatible with both Firefox and Chrome for testing.
  • Headless Mode: Option to run scans in headless browser mode for faster & traditional execution.
  • Paralellised Scanning: Utilises multi-threading for efficient scanning of multiple targets.
  • Customizable: Supports custom headers, cookies, and payload files.
  • Crawling Capability: Can crawl websites to discover and test additional pages.
  • Detailed Reporting: Provides comprehensive output with color-coded console logs and optional file output.
  • DOM XSS Detection: Advanced detection of DOM-based XSS vulnerabilities.
  • Payload Customization: Automatically customises payloads with unique identifiers for accurate detection.
  • Tamper Techniques: WAF evasion techniques
  • Detection of SQLi: Validates whether SQLi is also indicative within responses
  • WAF Detection: The ability to detect a firewall running on a target, using behavioural and static checks

is it the type of python script that make you rich ?
Reply
#5
(Jul 25, 2024, 07:54 PM)Lokie Wrote:
Features
  • Comprehensive Scanning: Tests URL parameters, POST parameters, headers, and DOM content for XSS vulnerabilities.
  • Multiple Browser Support: Compatible with both Firefox and Chrome for testing.
  • Headless Mode: Option to run scans in headless browser mode for faster & traditional execution.
  • Paralellised Scanning: Utilises multi-threading for efficient scanning of multiple targets.
  • Customizable: Supports custom headers, cookies, and payload files.
  • Crawling Capability: Can crawl websites to discover and test additional pages.
  • Detailed Reporting: Provides comprehensive output with color-coded console logs and optional file output.
  • DOM XSS Detection: Advanced detection of DOM-based XSS vulnerabilities.
  • Payload Customization: Automatically customises payloads with unique identifiers for accurate detection.
  • Tamper Techniques: WAF evasion techniques
  • Detection of SQLi: Validates whether SQLi is also indicative within responses
  • WAF Detection: The ability to detect a firewall running on a target, using behavioural and static checks


iam going to try this

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Selling in HTB | Trying to sell information posted for free
Reply
#6
(Jul 25, 2024, 07:54 PM)Lokie Wrote:
Features
  • Comprehensive Scanning: Tests URL parameters, POST parameters, headers, and DOM content for XSS vulnerabilities.
  • Multiple Browser Support: Compatible with both Firefox and Chrome for testing.
  • Headless Mode: Option to run scans in headless browser mode for faster & traditional execution.
  • Paralellised Scanning: Utilises multi-threading for efficient scanning of multiple targets.
  • Customizable: Supports custom headers, cookies, and payload files.
  • Crawling Capability: Can crawl websites to discover and test additional pages.
  • Detailed Reporting: Provides comprehensive output with color-coded console logs and optional file output.
  • DOM XSS Detection: Advanced detection of DOM-based XSS vulnerabilities.
  • Payload Customization: Automatically customises payloads with unique identifiers for accurate detection.
  • Tamper Techniques: WAF evasion techniques
  • Detection of SQLi: Validates whether SQLi is also indicative within responses
  • WAF Detection: The ability to detect a firewall running on a target, using behavioural and static checks


let's learn it. Thanks
Reply
#7
let's learn it. Thanks
Reply
#8
let's learn it. Thanks
Reply
#9
i will try this
Reply
#10
okay lemme try this
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  ⚡ SMTP Heist (SMTP Cracker) with Combolist ⚡ drcrypter 35 4,205 Yesterday, 08:02 PM
Last Post: simow02
  COLLECTION OF PHISHING TOOLS bloodymary71 190 13,303 Yesterday, 04:39 PM
Last Post: GUUTSAIT93
  The first stealer 100% made by AI k0t 196 18,017 Oct 13, 2026, 01:45 PM
Last Post: 8uu4
  Download Cobalt Strike 4.9.1 Leukemia 744 121,889 Oct 13, 2026, 01:29 AM
Last Post: notname6848
  Forum Partnership Offer LuciferDrainerSystem 0 434 Oct 12, 2026, 07:34 PM
Last Post: LuciferDrainerSystem

Forum Jump:


 Users browsing this forum: