GitHub - noLogicXD/xssizer: The best tool to find and prove XSS flaws.
2019-08-02 04:23:43 Author: github.com(查看原文) 阅读量:197 收藏

Join GitHub today

GitHub is home to over 36 million developers working together to host and review code, manage projects, and build software together.

Sign up

The best tool to find and prove XSS flaws.

CSS PHP JavaScript

Permalink

Type Name Latest commit message Commit time
Failed to load latest commit information.
js Add files via upload Jul 20, 2019
styles Add files via upload Jul 20, 2019
LICENSE Add files via upload Jul 20, 2019
README.md Update README.md Jul 20, 2019
list-csp.txt Add files via upload Jul 20, 2019
list-html.txt Add files via upload Jul 20, 2019
list-js1.txt Add files via upload Jul 20, 2019
list-js2.txt Add files via upload Jul 20, 2019
list-js3.txt Add files via upload Jul 20, 2019
list-js4.txt Add files via upload Jul 20, 2019
list-js5.txt Add files via upload Jul 20, 2019
list-multi.txt Add files via upload Jul 20, 2019
pro.php Add files via upload Jul 20, 2019
styles.css Add files via upload Jul 20, 2019
xssizer.js Add files via upload Jul 20, 2019

According to WikiPedia

Cross-site scripting is a type of computer security vulnerability typically found in web applications. XSS enables attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same-origin policy.

xssizer helps penetration tester, bug hunters and other security professionals to easily detect such vulnerabilities and produces a ready-to-use PoC exploit for demostration.

Content

  • Installation
  • Interface
  • Testimonies
  • Contributions
  • Trusted By
  • Words From Author

Installation

git clone https://github.com/noLogicXD/xssizer.git
cp xssizer -r /var/www/html/xssizer
service apache2 start

Then open localhost/xssizer/pro.php in your browser.

User interface

xssizer has a user friendly and straight forward interface

Testimonies

xssizer's private beta version recieved tremendous amount of appreciation from the beta testers. Here are some of the best compilments
Mahmoud Osama "I have to say that Brute Logic's KNOXSS is the best XSS tool I have ever seen! I have just got rewarded with bounty on YesWeHack for DOM XSS."
Hussain Adnan "You buy KNOXSS for ~$100 and by it [you] win $5000!"
Emad Shanab "I would like to thank KNOXSS for bypassing Akamai WAF and getting the magic alert box in famous credit card company."

Trusted By

Words from Author

Thank you for using xssizer. Please follow me on twitter @SecurityJoker.

文章来源: https://github.com/noLogicXD/xssizer
如有侵权请联系:admin#unsafe.sh