FinDOM-XSS : A Fast DOM Based XSS Vulnerability Scanner With Simplicity

FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner.

Installation

$ git clone https://github.com/dwisiswant0/findom-xss.git

Dependencies: LinkFinder

Configuration

Change the value of LINKFINDER variable (on line 3) with your main LinkFinder file.

Usage

To run the tool on a target, just use the following command.

$ ./findom-xss.sh https://target.host/about-us.html

This will run the tool against target.host.

URLs can also be piped to it and scan on them. For example:

$ cat urls.txt | ./findom-xss.sh

The second argument can be used to specify an output file.

$ ./findom-xss.sh https://target.host/about-us.html /path/to/output.txt

By default, output will be stored in the results/ directory in the repository with target.host.txt name.

Also Read – EvilDLL – Malicious DLL (Reverse Shell) Generator For DLL Hijacking

License

It is licensed under the Apache. Take a look at the LICENSE for more information.

Thanks

R K

Recent Posts

How to Install Docker on Ubuntu (Step-by-Step Guide)

Docker is a powerful open-source containerization platform that allows developers to build, test, and deploy…

5 days ago

Uninstall Docker on Ubuntu

Docker is one of the most widely used containerization platforms. But there may come a…

5 days ago

Admin Panel Dorks : A Complete List of Google Dorks

Introduction Google Dorking is a technique where advanced search operators are used to uncover information…

6 days ago

Log Analysis Fundamentals

Introduction In cybersecurity and IT operations, logging fundamentals form the backbone of monitoring, forensics, and…

7 days ago

Networking Devices 101: Understanding Routers, Switches, Hubs, and More

What is Networking? Networking brings together devices like computers, servers, routers, and switches so they…

1 week ago

Sock Puppets in OSINT: How to Build and Use Research Accounts

Introduction In the world of Open Source Intelligence (OSINT), anonymity and operational security (OPSEC) are…

1 week ago