$ ./xssfinderNAME:   xssfinder - XSS discovery toolUSAGE:   xssfinder [global options] command [command options] [arguments...]VERSION:   v0.1.0COMMANDS:   mitm     Passive agent scanning   help, h  Shows a list of commands or help for one commandGLOBAL OPTIONS:   --debug, -d             enable debug mode (default: false)   --verbose, --vv         enable very-verbose mode (default: false)   --notifier-yaml value   set notifier yaml configuration file   --outjson               set logger output json format (default: false)   --exec value, -e value  set browser exec path   --noheadless            disable browser headless mode (default: false)   --incognito             enable browser incognito mode (default: false)   --proxy value           set proxy and all traffic will be routed from the proxy server through   --help, -h              show help (default: false)   --version, -v           print the version (default: false)

启动被动扫描(中间人)模式，默认监听  127.0.0.1:8222# 下载并信任证书 http://xssfinder.ca./xssfinder mitm

notifier.yaml 模版：dingbot:  token: xxx  secret: xxxx# --notifier-yaml 指定通知机器人配置./xssfinder --notifier-yaml notifier.yaml mitm