XSStrike - Advanced XSS Detection Suite

PNK
Clumsy

Clumsy

Clumsy but Smart
as safety deposit
$750.0
1703550641864

XSStrike​

1703550689715

XSStrike is a Cross Site Scripting detection suite equipped with four hand written parsers, an intelligent payload generator, a powerful fuzzing engine and an incredibly fast crawler.


Instead of injecting payloads and checking it works like all the other tools do, XSStrike analyses the response with multiple parsers and then crafts payloads that are guaranteed to work by context analysis integrated with a fuzzing engine.Here are some examples of the payloads generated by XSStrike:


Apart from that, XSStrike has crawling, fuzzing, parameter discovery, WAF detection capabilities as well. It also scans for DOM XSS vulnerabilities.

Main Features​

  • Reflected and DOM XSS scanning​
  • Multi-threaded crawling​
  • Context analysis​
  • Configurable core​
  • WAF detection & evasion​
  • Outdated JS lib scanning​
  • Intelligent payload generator​
  • Handmade HTML & JavaScript parser​
  • Powerful fuzzing engine​
  • Blind XSS support​
  • Highly researched work-flow​
  • Complete HTTP support​
  • Bruteforce payloads from a file​
  • Powered by Photon, Zetanize and Arjun
  • Payload Encoding​

Download​

Gameplay Screenshots​

DOM XSS​


1703550767967

Reflected XSS​


1703550797801

Crawling​


1703550825101

Fuzzing​


1703550845302

Bruteforcing payloads from a file​


1703550871086

Interactive HTTP Headers Prompt​


1703550889036

Hidden Parameter Discovery​


1703550908403

XSS Strike Guide
 
Looks good, while reading the thread is quite easy to create one. It only takes a lot of time.

Thanks
 
Is my learning curve. I was thinking something along, write in php with html tag verification.
 
Legal warning We do not host or store any files on our website except thread messages, most likely your DMCA content is being hosted on a third-party website and you need to contact them. Representatives of this site ("service") are not responsible for any content created by users and for accounts. The materials presented express only the opinions of their authors.
🚨 Do not get Ripped Off ! ⚖️ Deal with approved sellers or use Leet Escrow on Telegram @leetlat
Back
Top