FinDOM-XSS : A Fast DOM Based XSS Vulnerability Scanner With Simplicity

FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner.


$ git clone


Dependencies: LinkFinder


Change the value of LINKFINDER variable (on line 3) with your main LinkFinder file.


To run the tool on a target, just use the following command.

$ ./

This will run the tool against

URLs can also be piped to it and scan on them. For example:

$ cat urls.txt | ./

The second argument can be used to specify an output file.

$ ./ /path/to/output.txt

By default, output will be stored in the results/ directory in the repository with name.

Also Read – EvilDLL – Malicious DLL (Reverse Shell) Generator For DLL Hijacking


It is licensed under the Apache. Take a look at the LICENSE for more information.