XSSearch

KO | EN

gitlite — search

#javascript #python #hacktoberfest #react #ai #typescript #llm #go #golang #android #machine-learning #rust #deep-learning #linux

(★ 59)

XSSearch is a comprehensive reflected XSS tool built on selenium framework in python language. It contains more than 3000 payloads for automating XSS attacks and validating XSS endpoint

XSSearch Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# XSSearch
##### _A Comprehensive Reflected XSS Scanner_

 <img width="350" src="Images/Banner.PNG" />

<img src=https://img.shields.io/badge/Made%20with-Python-blue>
<img src=https://img.shields.io/badge/Python-3.7-green>
<img src=https://img.shields.io/badge/Version-1.0-yellowgreen>
<img src=https://img.shields.io/badge/OS-Linux-yellow> 
<img src=https://img.shields.io/badge/Framework-Selenium-brightgreen>
<img src=https://img.shields.io/badge/WebDriver-ChromeDriver-blue>


 <h3 align="center"> XSSearch is a comprehensive reflected XSS tool with 3000+ Payloads for automating XSS attacks and validating XSS endpoints. </h3>

***
>#### DISCLAIMER :

The XSSearch developer will not be held liable if the tool is used with harmful or criminal intent. Please use at your own risk. :)

**** 
>#### USES :
- XSSearch can be used to discover reflected Cross Site Scripting (XSS) vulnerabilities 
- XSSearch is capable of validating XSS payloads.
- XSSearch will facilitate in the automation of brute - force attack for the verification of reflected XSS.
- Works on all Linux environment
- This can also be used in penetration testing to evaluate sanitization strength.
***
>#### FEATURES :
- Contains more than 3000 payloads for XSS validation
- Works on selenium framework & ChromeDriver
- It is faster than other XSS tools since the code is very light and rapid.
- The code and payloads can be modified according to the situation. 
***
>#### SETUP & INSTALLATION
XSSearch requires Selenium, ChromeDriver and Python to work smoothly on your system.

**Installing Selenium**
```
$ sudo apt update
$ pip3 install selenium
```
**Installing Chrome Browser for Linux (Skip this if you already have Chrome browser on your Linux)**
````
$ wget https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
$ sudo apt install ./google-chrome-stable_current_amd64.deb
````
**You may use the command to start Chrome from your terminal.**
```
$ google-chrome --no-sandbox
```
**Downloading ChromeDriver**

Go to https://chromedriver.chromium.org/downloads and get the linux 64 zipped version of ChromeDriver 80.0.3987.106.

Unzip the zip file. There will be a file for ChromeDriver. Open terminal on the same location and use the following command.
````
$ sudo chmod +x chromedriver
$ sudo mv -f chromedriver /usr/bin/chromedriver
````
***
>#### USAGE
XSSearch is a command line tool that uses a single command line instruction for simple and speedy execution. 
**Note** : This tool will only work on url which has a input paramter in the url. Example : www[.]target[.]com/?xyz=
```
$ python3 xssearch.py -u url.com/?s={xss} -p payloads.txt
```
**Arguments :** 
**-u** : It is required for URL input 
**-p** : It is required for Payload file input 
**{xss}** : It is a placeholder that the user should append after an equal to sign (=) in the url argument.

**Live Usage**
````
$ python3 xssearch.py -u https://ac121f0e1eb31ae5c0c9473f00f400f7.web-security-academy.net/?search={xss} -p payloads.txt
````

<img src=https://github.com/Encryptor-Sec/XSSearch/blob/main/Images/xssearch.PNG>

Above is the screenshot of the tool with live example. 
_Valid XSS exploits are marked with red alerts. 
Invalid XSS exploits are marked with blue alerts._

**Errors & Warnings** 
The following are some errors that might arise as a result of an incomplete command, not specifying arguments or not specifying placeholders.

Use the below command to get help
````
$ python3 xssearch.py -h
````

<img src=https://github.com/Encryptor-Sec/XSSearch/blob/main/Images/xssearch_warnings.PNG>

***
#### LICENSE
[MIT-License](LICENSE)
***
#### More suggestions and contributions are highly appreciated to make this tool better :)
### _STAY SAFE, ACT SMART_
### Hit Me Up
[![Twitter ](https://img.shields.io/badge/twitter-%231DA1F2.svg?&style=for-the-badge&logo=twitter&logoColor=white)](https://twitter.com/_encryptor_)
[![Instagram](https://img.shields.io/badge/instagram-%23E4405F.svg?&style=for-the-badge&logo=instagram&logoColor=white)](https://www.instagram.com/xhackerboyy)
[![LinkedIn](https://img.shields.io/badge/LinkedIn-0077B5?style=for-the-badge&logo=linkedin&logoColor=white)](https://www.linkedin.com/in/sathyaprakashsahoo)
[![Website](https://img.shields.io/badge/Website-FF5722?style=for-the-badge&logo=blogger&logoColor=white)](https://www.cyberbuddy.co.in)

XSSearch

XSSearch Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

XSSearch

XSSearch Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README