s0md3v/XSStrike
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Crawler and Cookie support update

Browse Source
This commit is contained in:
Ultimate Hackers
2017-07-18 13:34:25 +05:30
committed by GitHub
parent 48c7905bb7
commit 52193eb1db
1 changed files with 13 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
README.md
View File

@@ -1,8 +1,19 @@
<p align="middle"><img src="https://i.imgur.com/KTTlhPW.png" /></p>
# XSStrike
XSStrike is a python script designed to detect and exploit XSS vulnerabilites.
<img src='https://i.imgur.com/KTTlhPW.png' />
A list of features XSStrike has to offer:
- [x] Fuzzes a parameter and builds a suitable payload
- [x] Bruteforces paramteres with payloads
- [x] Has an inbuilt crawler like functionality
- [x] Detects and tries to bypass WAFs
- [x] Both GET and POST support
- [x] Most of the payloads are hand crafted
- [x] Negligible number of false positives
- [x] Opens the POC in a browser window
XSStrike is a python which can fuzz and bruteforce parameters for XSS. It can also detect and bypass WAFs.
### Installing XSStrike
Use the following command to download it
```