XSSTRON is a powerful Chromium Browser to find XSS Vulnerabilities automatically while browsing web, it can detect many case scenarios with support for POST requests too.
Installation
Install Node.js and npm (https://www.npmjs.com/get-npm) or (sudo apt install npm)
Download this repo files or (git clone https://github.com/RenwaX23/XSSTRON)
cd XSSTRON
npm install
npm start
Some users using Debian/Ubuntu might not able to run the tool as i think it’s an issue with Electron itself, you can continue using the app in Window/OSX and Linux installed on Windows. Check Known Issues
Usage
Just browse the web like a normal web browser then it will automatically look for XSS vulns in background and show them in a new window with POC.
GET request POC
POST request POC
Known Issues
Some users in certain linux distributions get into some problems try these
Kali/Debian users this fixes installation:
sudo apt install npm
sudo npm install -g electron –unsafe-perm=true –allow-root
cd XSSTRON
sudo npm install
electron . –no-sandbox
“devDependencies”: {
“electron”: “^10”
},
Failed to serialize arguments is known issue and might be fixed soon 🙂
This repository contains tools created by yogSahare0 while learning Python 3 for ethical hacking and penetration testing.…
"NetSecChallenger" provides a suite of automated tools designed for security professionals and network administrators to…
The essential tool for cybersecurity enthusiasts! This guide provides a detailed walkthrough on how to…
Meet "Poodone," the ultimate Python script designed for cybersecurity enthusiasts and professionals alike. Packed with…
The Linux version is no longer supported! The last Linux version is 6.0 that you…
Jin is a hacking command-line tools designed to make your scan port, gathering urls, check…