FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner.
Installation
$ git clone https://github.com/dwisiswant0/findom-xss.git
Dependencies: LinkFinder
Configuration
Change the value of LINKFINDER variable (on line 3) with your main LinkFinder file.
Usage
To run the tool on a target, just use the following command.
$ ./findom-xss.sh https://target.host/about-us.html
This will run the tool against target.host.
URLs can also be piped to it and scan on them. For example:
$ cat urls.txt | ./findom-xss.sh
The second argument can be used to specify an output file.
$ ./findom-xss.sh https://target.host/about-us.html /path/to/output.txt
By default, output will be stored in the results/ directory in the repository with target.host.txt name.
Also Read – EvilDLL – Malicious DLL (Reverse Shell) Generator For DLL Hijacking
License
It is licensed under the Apache. Take a look at the LICENSE for more information.
Thanks
The id command prints user and group identity for any account on the system. It shows the…
sed processes input line by line, applies your commands, and writes the result to standard output.…
Linux provides two main tools for renaming directories: mv for single renames and the rename utility for batch pattern-based…
The w command in Linux shows who is currently logged in to the system and what each…
The sysctl command reads and modifies Linux kernel parameters from the command line. Changes take effect immediately…
The whereis command locates the binary, source, and manual page files for a given command. Unlike which, it…