Skip to content

A revisited version of XSScon with DOM XSS based vuln research capability

License

Notifications You must be signed in to change notification settings

Admin9961/XSSCon2

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

12 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation


A powerful XSS scanner revisited by NC (DOM XSS based support added, changes in xsscon.py, crawler.py, Log.py, core.py)

Installing

Requirements:

  • asyncio aiohttp pyppeteer beautifulsoup4 lxml requests colorama backoff
  • python 3.12

  • Commands:
    git clone https://github.com/Admin9961/XSSCon2
    chmod 755 -R XSSCon
    cd XSSCon
    python3 xsscon.py --help 

    Usage

    Basic usage:

    python3 xsscon.py -u http://testphp.vulnweb.com

    Advanced usage:
    python3 xsscon.py --help
    (added DOM XSS based support! Syntax 'python xsscon.py -u https://www.example.com --dom')

    Main features

    • crawling all links on a website ( crawler engine )
    • POST and GET forms are supported
    • many settings that can be customized
    • Advanced error handling
    • Multiprocessing support.✔️
    • XSS DOM based support via headless browser added by NC ✔️

    About

    A revisited version of XSScon with DOM XSS based vuln research capability

    Resources

    License

    Stars

    Watchers

    Forks

    Releases

    No releases published

    Packages

    No packages published

    Languages