Kali Linux Tutorials

XSSCon is a simple XSS Scanner tool and a powerful XSS scanner made in python 3.7.

Installing

• Requirements:

BeautifulSoup4

pip install bs4

• Requests

pip install requests

• python 3.7

Commands:

git clone https://github.com/menkrep1337/XSSCon
chmod 755 -R XSSCon
cd XSSCon
python3 xsscon.py –help

Also Read – Rogue : An Extensible Toolkit Providing Penetration Testers An Easy-To-Use Platform

Usage

• Basic usage:

python3 xsscon.py -u http://testphp.vulnweb.com

• Advanced usage:

python3 xsscon.py –help

Main Features

• crawling all links on a website ( crawler engine )
• POST and GET forms are supported
• many settings that can be customized
• ETC….

Roadmap

• v0.3B:

Added custom options ( –proxy, –user-agent etc… )

• v0.3B Patch:

Added support for ( form method GET )

• v0.4B:

Improved Error handlingNow Multiple parameters for GET method is Supported

Note

• Sorry for my bad english
• if you run xsscon on the win10 terminal you will get an untidy output
• now it doesn’t support DOM