FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner.
Installation
$ git clone https://github.com/dwisiswant0/findom-xss.git
Dependencies: LinkFinder
Configuration
Change the value of LINKFINDER
variable (on line 3) with your main LinkFinder file.
Usage
To run the tool on a target, just use the following command.
$ ./findom-xss.sh https://target.host/about-us.html
This will run the tool against target.host
.
URLs can also be piped to it and scan on them. For example:
$ cat urls.txt | ./findom-xss.sh
The second argument can be used to specify an output file.
$ ./findom-xss.sh https://target.host/about-us.html /path/to/output.txt
By default, output will be stored in the results/
directory in the repository with target.host.txt
name.
Also Read – EvilDLL – Malicious DLL (Reverse Shell) Generator For DLL Hijacking
License
It is licensed under the Apache. Take a look at the LICENSE for more information.
Thanks
Playwright-MCP (Model Context Protocol) is a cutting-edge tool designed to bridge the gap between AI…
JBDev is a specialized development tool designed to streamline the creation and debugging of jailbreak…
The Kereva LLM Code Scanner is an innovative static analysis tool tailored for Python applications…
Nuclei-Templates-Labs is a dynamic and comprehensive repository designed for security researchers, learners, and organizations to…
SSH-Stealer and RunAs-Stealer are malicious tools designed to stealthily harvest SSH credentials, enabling attackers to…
Control flow flattening is a common obfuscation technique used by OLLVM (Obfuscator-LLVM) to transform executable…